Information Security Analyst II

Federal Home Loan Bank of Des Moines•Des Moines, IA

5d•$81,481 - $96,758•Hybrid

About The Position

The Information Security Analyst II is responsible for monitoring, analyzing, and responding to cybersecurity events while supporting the organization's overall security operations. As a member of the Information Security team, perform threat detection, incident investigation, vulnerability management, and security administration activities to protect the confidentiality, integrity, and availability of organizational systems and data.

Requirements

2-4 years of experience in Information Security, Security Operations Center (SOC), Cybersecurity, Information Technology, or a related technical discipline.
Experience investigating security alerts and responding to cybersecurity incidents.
Experience working with enterprise security technologies.
Working knowledge of one or more of the following: SIEM platforms, Endpoint Detection & Response (EDR/XDR), IDS/IPS, Email Security, Network Security Monitoring, Active Directory/Azure AD/Entra ID, Windows and Linux operating systems
Strong analytical and problem-solving abilities.
Ability to distinguish false positives from legitimate security events.
Understanding of the Cyber Kill Chain, MITRE ATT&CK Framework, or similar threat models.
Ability to assess risk and recommend appropriate remediation.
Excellent written and verbal communication skills.
Ability to prioritize multiple investigations simultaneously.
Strong attention to detail with excellent documentation skills.
Self-motivated with the ability to work independently and collaboratively.
Demonstrates curiosity, integrity, and a commitment to continuous learning.

Nice To Haves

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience).
Security+, CySA+, GSEC, GCIA, GCIH, CISSP (Associate), or comparable certifications.
Experience with SOAR, threat intelligence platforms, cloud security, or digital forensics is preferred.

Responsibilities

Monitor security alerts and events generated by SIEM, EDR, email security, cloud security, identity, network, and other security technologies.
Analyze security events to determine validity, impact, severity, and appropriate response.
Investigate suspicious activity and perform triage of security incidents, including containment and remediation efforts, by coordinating with internal technology teams
Escalate confirmed incidents according to established incident response procedures.
Participate in containment, eradication, recovery, and post-incident reviews.
Document investigations, findings, evidence, and remediation activities.
Perform threat hunting activities to identify malicious or abnormal behavior.
Correlate events across multiple security platforms to identify emerging threats.
Review indicators of compromise (IOCs) and indicators of attack (IOAs).
Monitor threat intelligence sources and recommend defensive improvements.
Identify trends in alerts and recommend tuning to reduce false positives.
Assist with vulnerability management activities including reviewing scan results, validating findings, and tracking remediation.
Maintain documentation, runbooks, and standard operating procedures; test security controls and validating operational readiness.
Partner with Infrastructure, Cloud, Networking, Application Development, Risk Management, and IT Operations to resolve security issues.
Provide recommendations to improve detection capabilities and operational processes; assist in developing and refining incident response playbooks.
Participate in security projects and implementation efforts.
Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
Participate in incident response tabletop exercises to validate response procedures, identify gaps, and improve organizational preparedness.
Participate in an on-call incident response rotation to provide after-hours support for cybersecurity incidents and critical security events.
Support post-incident reviews by documenting lessons learned and recommending improvements to security controls, processes, and response procedures.
Perform initial forensic data collection to support security investigations.
Validate remediation activities following security incidents.
Support internal and external audits by providing evidence related to security operations.
Assist with onboarding new security tools and capabilities and perform routine administration of existing tools.
Other duties and projects as assigned.