Cybersecurity Analyst I

Redstone Federal Credit Union•Huntsville, AL

6d•Onsite

About The Position

Provides first level support that includes monitoring, investigating and responding to security related events across multiple security tools and generating numerous security alerts; performs initial security event analysis and assists with in-depth investigations; Assists with the continual monitoring and analysis of system activities to identify, mitigate and recover from malicious activities; Works with other technology staff, third party software vendors, MSSPs (Managed Security Service Provider) and internal members to mitigate potential security events to meet the needs of the Credit Union.

Requirements

4 Year / Bachelors Degree in Information Security, Information Technology, Computer Information Systems, or a closely related field. - Required
1 Year - Information technology experience with emphasis on information security, and cybersecurity, preferably in a financial services environment. - Required
Effectively apply internal/external customer service practices and processes to meet quality service standards and achieve member satisfaction.
Learn and apply information, on a wide range of Credit Union products, services and regulatory compliance requirements, in order to assess member situations and develop solutions.
Communicate in a professional manner and deliver information clearly and effectively.
Actively listen to questions, opinions and ideas of others.
Use tact and diplomacy in sensitive and confidential situations.
Use correct English including spelling, grammar and punctuation.
Operate computers and use business software and other standard office equipment.
Understand and follow written and oral instructions.
Set priorities and manage one’s own time effectively.

Nice To Haves

Entry-to-intermediate level security related certifications (e.g., CompTIA Security+, GSEC GIAC Security Essentials Comptia CySA+, Cybersecurity Analyst+, CSX-P Cybersecurity Practitioner, Certified Security Analyst (ECSA) - Preferred
Experience working with Security Information and Event Management (SIEM) solutions, Next-Gen Anti-Virus, Intrusion Detection/Prevention Systems, Firewalls, Active Directory, Vulnerability Assessment tools, Forensic tools, and other security tools found in large network environments. - Preferred

Responsibilities

Reviews security alerts and events to identify false positives and escalate anomalies per RFCU’s Cybersecurity Incident Response Guidelines.
Documents actions for security alerts, events, and incidents.
Continuously monitor events and alerts generated by enterprise Security Information Event Management (SIEM) tool and investigate security incidents.
Investigate level 1 alerts and security related issues using various industry standard security tools.
Performs analysis on multiple security related incidents, including but not limited to; phishing, malware and social engineering; follows the Incident Response steps to quickly identify, contain, eradicate, and recover.
Monitors and analyzes network traffic while reporting issues and escalating as necessary to other members of the Information Security team.
Manage and administer the software asset management tool, generate reports and work with different business units to resolve any issues found.
Responsible for installing, updating and onboarding security agents for all security related tools including but not limited to SIEM, Next-Gen AV, AETD, UEBA, and Forensic Tools.
Collaborate with MSSPs (Managed Security Service Provider) to prevent, detect, and respond to security incidents, implement best practices, and manage security tools and devices across the enterprise.
Responsible for collaborating across the Credit Union on security events and educating staff on information security policies and procedures; supporting enterprise activities for security awareness, through the Information Security Ambassador Program and assisting with the Security Awareness Program.
Assists other members of Information Security with the monitoring of Firewall, SIEM and other security related system reports for suspicious activity, perform investigation if needed; working with business units to fix outstanding vulnerabilities discovered from penetration testing, scanning tools, and threat Intel feeds.
Manage and administer the encrypted drive system, and issue encrypted drives to users.
Collects data and builds dashboards and reports to measure effectiveness of the Information Security & Cybersecurity Program.
Assist in maintaining an up-to-date PSAO (Product Systems and Application Owners) System for all credit union Products/Systems/Applications.
Evaluate security solutions, and provide recommendations to management on security software, hardware, policies, and procedures for implementation across the credit union.
Maintains a professional image and demeanor at all times, consistently demonstrating Credit Union RISE Values and adhering to the Code of Ethics.
Delivers friendly, caring service to internal and external members.
Complies with all applicable State, Federal and NCUA rules and regulations and all Credit Union policies and procedures.
Follow all physical and online security procedures and maintain strict confidentiality of all member information.
Completes all required regulatory and compliance training and maintains required knowledge of Credit Union products and services.
Works scheduled hours and maintains punctuality.
Performs other related duties as assigned or requested.