Cybersecurity Analyst

Redwood Credit Union•Napa, CA

2d•$100,604 - $132,552

About The Position

Redwood Credit Union is seeking a Cybersecurity Analyst to help safeguard its critical information resources. The analyst collaborates with architects, engineers, developers, internal audit, vendor management, business lines, and management to design and implement security policies, practices, technologies, and tools. The role develops and maintains effective security controls in a dynamic technology environment and promotes information security awareness across the company to help meet industry best practices and internal, Member, and regulatory requirements. The position conducts security analysis and incident response, including vulnerability assessments, threat modeling, risk assessments, vendor risk and alert management, SIEM log analysis, and detection-rule development using KQL. It manages cybersecurity tickets, investigates and responds to security events, recommends improvements and mitigations, and advises management on evolving risks. The analyst also designs, implements, and monitors security controls; strengthens the security framework in alignment with CIS v8.1 and NIST CSF 2.0; and contributes to internal audits and regulatory compliance. The ideal candidate has education and experience equivalent to a bachelor's degree in computer science or a closely related field and at least five years of IT experience. The position requires the ability to travel 10% of the time and participate in an on-call rotation for after-hours incident escalations.

Requirements

Experience with M365, an EDR/XDR platform such as CrowdStrike, Palo Alto, or Microsoft Defender, and Azure administration.
Experience with Microsoft Sentinel.
Experience managing network devices such as firewalls, VPN appliances, remote access systems, and servers.
Intermediate experience managing Microsoft and Linux servers, Mac and Windows endpoints, and MDM solutions.
Thorough knowledge of processes, procedures, rules, and regulations pertaining to information technology security.
Ability to use and administer ticket-tracking software such as Jira.
Ability to work independently with little supervision or direction.
Ability to develop and implement technology projects.
Ability to interact and communicate with outside vendors and internal clients.
Effective verbal and written communication skills.
Ability to establish and maintain effective working relationships with a diverse group of people.
Ability to travel 10% of the time.
Ability to work on an on-call rotation for after-hours incident escalations.
Education and experience equivalent to a bachelor's degree in computer science or a closely related field.
A minimum of five years of IT experience.

Nice To Haves

Security+, Azure SCIF (Security Compliance Identity Fundamentals), or another security certification is strongly preferred.

Responsibilities

Conduct security analysis, including vulnerability assessments, threat modeling, risk assessments, vendor risk management, and alert management.
Establish standards and evaluation criteria for SIEM log analysis and detections, and write detection rules using KQL.
Manage the cybersecurity ticket queue, set triage priorities, and define escalation thresholds in line with organizational risk appetite.
Investigate and respond to security events, meeting SLAs for investigation, containment, resolution, and escalation.
Identify opportunities to improve cybersecurity processes and incident response.
Collaborate with cross-functional teams to analyze and mitigate security threats.
Use forensic analysis to develop recommendations that help prevent future incidents.
Monitor and interpret emerging threat trends, and advise management on evolving risks.
Recommend ways to reduce the risk profile of systems and processes.
Design, implement, and monitor security controls across systems and applications.
Strengthen the security framework to align with CIS v8.1 and NIST CSF 2.0.
Advise and contribute to security-related aspects of internal audits and regulatory compliance.
Partner with IT staff on security best practices and emerging technologies.
Participate in continuous learning to stay current with cybersecurity advancements.
Collaborate with colleagues to draft technology plans that enhance the security posture.
Participate in community events, volunteer boards, and associations.

Benefits

Competitive medical, dental, and vision insurance
Mental health offerings
Employee performance incentive plan
Salary advancement through merit increases based on performance
401(k) program with employer match
Competitive PTO accrual
11 paid company holidays
Birthday off
Discounts on RCU standard collateral auto loans, recreational and boat loans, Visa loans, and lines of credit
0% interest loans for eligible immigration-related expenses, naturalization expenses, and garment, fitness, or home office equipment
100% financing for employee-purchased homes