Job Description:
• Collect, analyze, validate, monitor, and respond to cybersecurity intelligence and events
• Analyze and respond to security events logged and correlated by the SIEM or other security platforms
• Monitor security solutions and review logs and reports from security tools, workstations, servers, and network devices
• Investigate and resolve anomalous activity and serve as a first responder for potential security events
• Coordinate with third-party security vendors regarding security log analysis
• Collect, analyze, assess, tune, and disseminate cybersecurity threat intelligence
• Analyze configuration and vulnerability information to determine risk to the Bank’s data security
• Escalate adverse activity to the Incident Response Team
• Participate in the cybersecurity on-call rotation
• Provide feedback on rule and alert tuning and validate log sources and event types
• Analyze system configurations and technical specifications against security control standards and identify deficiencies
• Serve on the incident response team and participate in incident response planning and testing exercises
• Ensure compliance with bank policies, procedures, and state, federal, and regulatory requirements
Requirements:
• Associate Degree or equivalent work experience from a regionally accredited institution in Information Security, computer science, mathematics, engineering, or a closely related field
• Two or more years of direct Cybersecurity experience, preferably as a cybersecurity analyst or similar role
• Experience analyzing and responding to cybersecurity events, preferably at a financial institution
• Ability to read, write, speak, and understand English
• Excellent interpersonal and computer skills
• Proven analytical and problem-solving abilities
• Ability to prioritize and execute tasks in a high-pressure environment
• Ability to research cybersecurity issues and products
• Ability to present ideas in business-friendly and user-friendly language
• Strong self-motivation, attention to detail, and ability to work collaboratively
• Ability to learn and apply new information
• Strong security mindset
• Understanding of financial sector regulatory requirements and security best practices
• Preferred experience with regulatory compliance monitoring, including PCI DSS log monitoring, alert review, evidence collection, and control validation
• Familiarity with monitoring controls in highly regulated environments and opportunities to automate security operations
• Preferred GIAC, CompTIA, or similar cybersecurity certifications
Benefits:
• Telecommuting / 100% full-time telecommuting option
• Secure home office environment
• Reliable private internet connection; cable or fiber preferred
• Travel to meetings as needed
• Annual Compliance Training
• New Employee Orientation