Cybersecurity Analyst

F&M Trust•Chambersburg, PA

2d•Onsite

About The Position

F&M Trust is looking for a Cybersecurity Analyst to join our Technology Services team at our Corporate Headquarters in Chambersburg, PA. This role is ideal for an early‑career cybersecurity professional who is eager to gain hands-on experience protecting systems in a highly regulated financial environment. You will play a key role in monitoring security activities, responding to potential threats, and partnering with internal teams and external security partners to safeguard the bank's technology ecosystem. This position offers meaningful exposure to incident response, compliance frameworks, and real-world security operations in a collaborative and supportive environment. WORK LOCATION This position is based at F&M Trust's Corporate Headquarters in Chambersburg, PA and reports to the Network Security Engineer.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field OR equivalent practical experience.
Equivalent experience may include hands-on technical work (home lab environments), 1–2 years in MSP, help desk, or system administration roles, and/or relevant certifications or reputable cybersecurity bootcamps.
A minimum of two (2) years of related experience is typically required.

Responsibilities

Reviewing and investigating security alerts generated by internal tools, dashboards, and reporting platforms.
Acting as the day-to-day point of contact with our Managed Detection & Response (MDR) provider and 24/7 Security Operations Center.
Assisting with the identification, escalation, documentation, and resolution of security incidents from start to finish.
Supporting vulnerability scanning and tracking remediation efforts with IT partners.
Participating in incident response activities aligned with established security procedures and playbooks.
Assisting with compliance-related initiatives tied to PCI-DSS, SOX, GLBA, and other regulatory requirements.
Supporting security awareness efforts and internal training initiatives.
Partnering with IT teams to promote secure configurations, system hardening, and patch management.
Assisting with the ongoing review and enforcement of security policies and access controls.