Information Security Analyst 1

CAMPUS USA CREDIT UNION•Newberry, FL

About The Position

Under the guidance of management and senior staff, assists with identifying and detecting security incidents and security weaknesses across the computing infrastructure and for receiving, reviewing, and responding to cybersecurity incidents. Keeps current with the latest information security trends to provide a secure environment for credit union members and staff. Maintains the highest standards of professionalism, integrity, and confidentiality, assisting with the mitigation of cyber threats and ensuring compliance with privacy and security laws.

Requirements

Bachelor's Degree in Computer Science, Information Technology, Information Security, or a relevant field
CompTIA Security+, CC (Certified in Cybersecurity). Certified Information Systems Security Professional (CISSP) Associate, Certified Ethical Hacker (CEH) or other relevant certification
A combination of education and experience that provides the necessary skills and knowledge to satisfactorily perform the essential job functions may be substituted
0 - 2 years of similar or related experience
Access Control
Cybersecurity
Disaster Recovery
Information Security
Penetration Testing
Regulatory Compliance
System Security
Security Information and Event Management (SIEM)
Threat Analysis
Analytical Thinking
Attention to Detail
Collaboration
Confidentiality
Effective Communication
Honesty And Integrity
Initiative
Risk Assessment

Responsibilities

Assist with monitoring and responding to security alerts and events from various security tools and technologies. Performs triage and escalates when necessary
Interface directly with customers when necessary, providing a high level of confidence and thoroughness during the investigative process
Assist with performing investigations of suspicious events using security technologies, leveraging managed security services provider's (MSSP) tooling and intelligence
Work with IT team to perform analysis of security logs, network traffic, and endpoint data
Collaborate with other security team members and IT staff to address security incidents, mitigation efforts. Serves as incident owner
Participate in the planning and design of enterprise security architecture, under the direction of management and senior staff, where appropriate
Assist IT team and MSSP with the implementation of new detections, integrations, and to tune alerting for security controls
Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, playbooks, and procedures) under the direction of management and senior staff, where appropriate
Document and report incident findings, actions taken, and lessons learned
Work with the training team to develop new information security training on policies and procedures
Participate in the planning and design of an enterprise business continuity plan and disaster recovery plan, under the direction of the management and senior staff, where appropriate
Participate in the design and execution of vulnerability assessments, penetration tests, and information security audits
Serve as an on-call resource for major information security incidents.