Cybersecurity Analyst

Redwood Credit Union • Napa, CA

1d

About The Position

Redwood Credit Union is seeking a Cybersecurity Analyst to help safeguard its critical information resources. The role collaborates with architects, engineers, developers, internal audit, vendor management, business units, and management to design and implement security policies, practices, technologies, and tools. The analyst develops and maintains effective security controls in a dynamic technology environment and promotes security awareness across the company to help meet industry best practices and internal, Member, and regulatory requirements.

The position performs security analysis and incident response, including vulnerability, threat, risk, and vendor-risk assessments; SIEM log and detection analysis; security ticket triage; and investigation, containment, resolution, and escalation of security events. It also helps improve incident response, develops recommendations based on forensic analysis, monitors emerging threats, and advises management on reducing risk.

The analyst designs, implements, and monitors security controls across systems and applications, contributes to a security framework aligned with CIS v8.1 and NIST CSF 2.0, and supports internal audits and regulatory compliance. The role partners with IT staff, contributes to technology plans, keeps current with cybersecurity developments, and participates in community events, volunteer boards, and associations. Travel is approximately 10%, and the position participates in an on-call rotation for after-hours incident escalations.

Requirements

• Experience with M365, an EDR/XDR platform such as CrowdStrike, Palo Alto, or Microsoft Defender, and Azure administration.
• Experience with Microsoft Sentinel.
• Experience managing network devices such as firewalls, VPN appliances, remote access systems, and servers.
• Intermediate experience managing Microsoft and Linux servers, Mac and Windows endpoints, and MDM solutions.
• Thorough knowledge of processes, procedures, rules, and regulations pertaining to information technology security.
• Ability to use and administer ticket-tracking software such as Jira.
• Ability to work independently with little supervision or direction.
• Ability to develop and implement technology projects.
• Ability to interact and communicate with outside vendors and internal clients.
• Effective verbal and written communication skills.
• Ability to establish and maintain effective working relationships with a diverse group of people.
• Ability to travel 10% of the time.
• Ability to participate in an on-call rotation for after-hours incident escalations.
• Education and experience equivalent to a bachelor's degree in computer science or a closely related field, and a minimum of five years of IT experience.

Nice To Haves

• Security+, Azure SCIF (Security Compliance Identity Fundamentals), or another security certification is strongly preferred.

Responsibilities

• Conduct vulnerability assessments, threat modeling, risk assessments, vendor-risk assessments, and alert management.
• Establish standards and evaluation criteria for SIEM log analysis and detections, and write detection rules using KQL.
• Manage the cybersecurity ticket queue, set triage priorities, and define escalation thresholds in line with organizational risk appetite.
• Investigate and respond to security events, meeting SLAs for investigation, containment, resolution, and escalation.
• Identify improvements to cybersecurity processes and incident response.
• Collaborate with cross-functional teams to analyze and mitigate security threats.
• Develop recommendations to prevent future incidents based on forensic analysis.
• Monitor emerging threat trends and advise management on evolving risks.
• Recommend ways to reduce the risk profile of systems and processes.
• Design, implement, and monitor security controls across systems and applications.
• Strengthen the security framework to align with CIS v8.1 and NIST CSF 2.0.
• Advise and contribute to security-related internal audits and regulatory compliance.
• Partner with IT staff on security best practices and emerging technologies.
• Participate in continuous learning and collaborate with colleagues on technology plans that enhance security posture.
• Participate in community events, volunteer boards, and associations.

Benefits

• Competitive medical, dental, and vision insurance, and mental health offerings.
• Employee performance incentive plan.
• Merit-based salary advancement.
• 401(k) program with employer match.
• Competitive PTO accrual, 11 paid company holidays, and the employee's birthday off.
• Discounts on RCU collateral auto loans, recreational or boat loans, Visa and line-of-credit loans.
• Zero-interest loans for eligible immigration-related expenses, naturalization expenses, and garment, fitness, or home office equipment.
• 100% financing for employee-purchased homes.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level