Information Security Analyst

SHELL FEDERAL CREDIT UNION•Deer Park, TX

8d•Onsite

About The Position

The Information Security Analyst is responsible for working with and providing support to the ISO and IS&T Team in maintaining security best practices and regulatory requirements. This role involves assessing network threats, performing vulnerability assessments, operating intrusion/prevention programs, administering access/monitoring of critical systems, reviewing logs, and recommending remedial actions. The analyst will also maintain the security and health of the network, monitor programs to prevent unauthorized access, respond to security threats, assist in evidence preservation, perform log reviews, conduct network vulnerability scans, and utilize cybersecurity tools to test the corporate environment. Additionally, the role supports IS&T staff on security-related projects, participates in business continuity/disaster recovery planning, and communicates security information to management.

Requirements

Three or more years’ strong Windows and Windows Network administration, database systems and network connectivity skills.
Three or more years’ experience performing security related tasks for a medium to large enterprise.
Two-year degree; Cybersecurity degree and/or equivalent related experience or certification.
Two or more years’ systems development, information security, PC support and network/systems administration experience.
Knowledge of credit union products and services
Must be able to communicate information technology and security procedures and requirements to users and key Management
Must possess functional knowledge regarding regulatory issues pertaining to security in a financial institution
Must have strong analytical and problem-solving skills with the ability to clearly present and communicate technical and management concepts
Advanced computer skills
Must possess professional verbal communication skills
Position requires participation in on-call rotations as needed or assigned.
Position will at times require participation in after-hours or weekend work.
Must be prepared to participate in Disaster Recovery, Business Continuity, or Incident Response scenarios.
Ability to multitask in a fast-paced environment.
Ability to handle workloads during emergencies or stressful time sensitive situations.
Ability to work in an open-concept workspace/environment.

Nice To Haves

Current, Industry standard recognized certification in information security (ex: Security+, CEH certification)
Good knowledge/experience working with following products a plus: Windows Server Technologies, Cisco Routers/Switches/Firewalls, Websense, Symantec Endpoint Protection, IDS/IPS, Cisco CSA, Windows Active Directory Infrastructure, Linux based systems, Kali Linux, Threat Hunting, Honeypots, Wireshark, NESSUS, Penetration Testing Tools, Dell KACE, working knowledge of Python.

Responsibilities

Consistently meet all Shell FCU Service Commitments; Shell FCU Employee Creed and Shell FCU Service Distinctions
Accountable to maintain knowledge of and comply with all applicable rules and regulations required within the scope of duties, including, but not limited to, the Bank Secrecy Act
Required to attend annual training sessions as instructed or scheduled
Perform job duties and responsibilities in compliance with Shell FCU policies, procedures, philosophy, and standards of performance
Assist security team in identifying current security and compliance requirements and recommend security solutions or actions
Assess network threats such as computer viruses and malware, perform vulnerability assessment in support of penetration analysis, operate host and network intrusion/prevention programs, administer access/ monitoring of critical systems, review critical system logs, identify, and document unique local threats/vulnerabilities and recommend remedial action
Work with ISO/Network Team security standards and practices to install, design, configure and maintain security applications that protect against malware, encrypt information, and ward off hackers and other bad actors
Maintain the security and health of the network from misuse through neglect, lack of training, or malevolence from internal and external sources
Monitor programs and processes that keep outsiders from gaining access to Shell FCU private networks and data
Prepare for and provide rapid response to security threats such as virus, worms, or other malicious attacks
Assist in the preservation, identification, extraction, and documentation of evidence stored in computers
Perform log reviews on a predefined basis, to detect anomalous activity
Perform network vulnerability scans and make recommendations based on findings.
Conduct forensic analyses when necessary
Utilize cybersecurity tools to periodically test the corporate environment and verify end user best practices to maintain strong security practices
Work with IS&T staff to continually review and maintain security hardening standards within newly deployed systems, codes, updates, upgrades, or patches
Assist in patch management and firmware updates to maintain optimal levels of security
Support anomaly detection and trending tools to provide in-depth analysis of events detected by these applications.
Respond to network security incidents through remediation efforts including implementation of a secure infrastructure, the secure repair of technology components and assist in the development of incident response and recovery processes
Support IS&T staff on security-related projects including design, configuration, deployment and maintenance of policy enforcement tools, techniques, and reporting
Participate in business continuity / disaster recovery planning and Change Management / Change Configuration processes and reviews
Effectively communicate security information gathered from security tools, logs, evolving risks, and reported incidents by employees, to management or security teams
Perform additional duties, as assigned