Information Security Analyst II - Security Operations

TD•Mount Laurel, NJ

1d•$71,960 - $116,420

About The Position

The Information Security Analyst II role defines, develops, and/or implements technology controls and information security policies, programs, and tools. The role provides specialized expertise and guidance in assessing risks, identifying potential gaps, and delivering security solutions to mitigate risks and protect the Bank. It participates in projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business-line, or enterprise level for its area. The analyst acts as a key resource and subject matter expert in at least one technology niche, field, or line of business, using advanced knowledge of technology controls and security domains, disciplines, and practices. The position supports the Bank’s customer-service strategy, promotes a positive and inclusive team environment, and may provide leadership, training, and guidance to other team members. The posting lists a preferred background coordinating Security Operations Monitoring and expertise in security operations tools, incident analysis, and related controls.

Requirements

5–7 years of relevant experience.
Advanced knowledge of one or more technology controls or security domains, disciplines, and practices.
Proficient to advanced knowledge of organizational, technology-controls, security, and risk issues.
Preferred bachelor’s degree.
Information security certification or accreditation is an asset.
Thorough understanding of security controls and mechanisms and threat-risk assessment techniques for complex data, applications, and network environments.
Expert knowledge of security incident and event management, log analysis, network traffic analysis, malware investigation and remediation, SIEM correlation logic, and alert generation.
Ability to analyze and report on information from multiple data sources using data-mining techniques, document analysis results, and present reports to technical and executive stakeholders.
Expert knowledge of SIEM, EDR, XDR, firewalls, WAF, NIDS, or equivalent technologies.
Understanding of security principles, techniques, and technologies, including the NIST Cybersecurity Framework, SANS Top 20 Critical Security Controls, and OWASP Top 10.
Expert knowledge of enterprise IT operations, incident and change management, access/identity management, security operations, vulnerability and compliance management, ticketing systems, incident ticket life cycles, and SLA terms.
Basic programming skills in various disciplines, including scripting languages.
Completion of at least one of the following certifications: GIAC (GSEC, GCIH, GCIA, GCFE, or GCFA), CCNP, CCNA, or CISSP.

Nice To Haves

Experience leading or coordinating the Security Operations Monitoring team.
Bachelor’s degree preferred.
Information security certification or accreditation is an asset.

Responsibilities

Participate in projects of moderate to high complexity.
Serve as a key resource and subject matter expert in at least one technology niche, field, or line of business.
Provide specialized guidance on assessing risks, identifying potential gaps, and developing security solutions to protect the Bank.
Provide complex reporting, analysis, and assessments at the functional, business-line, or enterprise level for the assigned area.
Support the Bank’s Customer Service Strategy and consider the impact of decisions on the Bank, customers, and stakeholders.
Deliver quality service to internal partners, vendors, and customers, and contribute to improving the partner and customer experience.
Contribute to an inclusive culture and positive team environment.
Communicate project and issue status to the team, share knowledge, and learn from colleagues.
May provide leadership, training, and guidance to other team members.
Analyze information from multiple data sources and document results, prepare reports, and present findings to technical and executive stakeholders.