Cyber Security Analyst II

BankUnited, Inc.•Miami Lakes, FL

11d

About The Position

As a member of the Security Operations Center (SOC) team, the Cyber Security Analyst II proactively assesses and analyzes cyber threat information related to the organization's on-premises and cloud environments. The role involves understanding threats to the organization and implementing measures to prevent or combat existing and potential cyber threats. The analyst investigates, triages, and mitigates security events; performs digital forensics and incident response analysis; supports incident responders; monitors security controls and compliance; and works with internal IT and business teams. Other duties and special projects may be assigned.

Requirements

Bachelor's degree or higher in Information Security, Computer Science, Information Assurance, Cyber Security, or a related field, or an equivalent combination of work and certifications.
Experience in cloud security or cloud administration.
Experience with cloud security tools and technologies such as AWS Security Hub, Azure Security Center, or GCP Security Command Center.
Experience with scripting languages.
Firm grasp of the design and implementation of effective information security controls.
Experience with Security Orchestration, Automation and Response (SOAR).
Understanding of network and host-based DLP technologies, processes, policies, and procedures.
Basic understanding of regulatory compliance initiatives related to Sarbanes-Oxley (SOX) and the Gramm–Leach–Bliley Act (GLBA).
Familiarity with cyber and cloud security standards, frameworks, and guidelines such as NIST, PCI-DSS, MITRE, and OWASP.
Ability to organize and analyze large amounts of data and report findings.
Working knowledge of monitoring tools.
Proficiency with a security incident handling tool such as SIEM or ESEM.
Familiarity with Active Directory, group policies, and role-based concepts.
Working knowledge of TCP/IP and network technology functions.
Working understanding of network security devices, IPSec VPNs, TCP/IP, routing, switching, VRF, VLANs, bandwidth utilization, and load balancers.
Strong analytical and problem-solving skills.
Good interpersonal, organizational, writing, and communication skills.
Ability to work effectively in a team environment.
Ability to perform multiple projects simultaneously.
Firm understanding of penetration testing and vulnerability assessments.
Strong networking background and demonstrated understanding of TCP/IP networking.
Self-motivated.
Working knowledge of technologies including forensic tools, network monitoring tools, and host security prevention tools.

Nice To Haves

Cyber security analysis, incident response, or related security experience is preferred.
CISSP (Certified Information Systems Security Professional).
CEH (Certified Ethical Hacker).
CHFI (Computer Hacking Forensics Investigator).
SANS/GIAC training or certifications.
CCSP (Certified Cloud Security Professional).
SSCP (Systems Security Certified Professional).
Cloud security certifications, such as AWS certifications.
Security+.
Certificate in Cyber Security.
Candidates residing in locations within BankUnited's footprint may be given preference.

Responsibilities

Monitor and analyze network traffic, IDS/IPS, DLP events, security events, and logs.
Perform secondary reviews and maintain DLP systems and policies.
Understand security and compliance policies and incident response processes.
Review daily reports and files for compliance with policies and standards.
Escalate non-compliance issues to the appropriate group and follow up on remediation.
Work with internal customers to respond to escalations.
Distinguish potential intrusion attempts from false alarms and prioritize accordingly.
Determine whether monitored security events should be escalated to incidents and follow applicable response and reporting procedures.
Create and track security investigations through resolution.
Open and assign tickets to the appropriate resolver, and validate and close tickets related to false positives.
Investigate, triage, and mitigate detected security events.
Compose security alert notifications and other communications.
Advise incident responders on steps to investigate and resolve computer security incidents.
Stay current on vulnerabilities, attacks, and countermeasures.
Work with the SNOC 24x7 operations team, network and system administrators, other IT/IS groups, and business lines to support incident response and assess event risk.
Implement and monitor controls that protect the environment from malicious cyber activity and ensure processes are effective.
Conduct digital forensics and incident response analysis of suspected compromised systems.
Assist in establishing procedures for handling detected security events.
Keep abreast of emerging information security technology and public policy trends.
Assist with gathering and analyzing the current and future threat landscape, and help the SNOC Manager provide leadership with an overview of organizational risks and threats.
Monitor threat intelligence sources to maintain awareness of current security threat levels.
Use intelligence from the Threat Intelligence team to improve detection, update monitoring, and support prevention of cyber attacks.
Advise on IT initiatives, business projects, and engineering with regard to security industry best practices.
Comply with applicable federal and state laws, regulations, and guidance, including anti-money laundering requirements such as the Bank Secrecy Act and US PATRIOT Act.
Follow Bank policies and procedures and complete required training.
Identify and report suspicious activity.