Information Security Analyst

Community First Credit Union • Neenah, WI

9d

About The Position

At Community First, the security of technology and infrastructure is mission critical. The Information Security Analyst independently administers security technologies, investigates security events, and owns recurring security processes that protect member data, employee systems, business operations, and member-facing services. This is a hands-on security operations role with broad technical responsibility. The Analyst configures and maintains assigned controls, investigates alerts to a defensible conclusion, improves repeatable processes, and helps ensure security work is documented, measurable, and supportable.

The role also supports incident response, security changes, technology projects, audits, regulatory examinations, access reviews, risk assessments, control testing, business continuity, disaster recovery, and tabletop exercises. The Analyst creates and maintains operational documentation, uses automation where appropriate, and communicates security requirements and findings to technical and non-technical audiences. The position may include helping onboard and coach Information Security Specialists and participating in the department's approved after-hours maintenance or incident-response process.

Requirements

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and technical experience.
• At least 2 years of security administration, systems administration, network administration, or comparable hands-on technical experience.
• Demonstrated ability to configure and maintain enterprise security tooling, not only monitor it.
• Solid working knowledge of network infrastructure, including ports, protocols, routing, switching, segmentation, and traffic flow.
• Working knowledge of enterprise operating system administration across Windows and Linux.
• Practical experience with several of the following: centralized logging or SIEM, endpoint detection and response, firewall administration, intrusion detection and prevention, vulnerability management, email security, cloud security controls, and identity and access management.
• Ability to investigate a security event to a defensible conclusion and explain the reasoning to a non-specialist.
• Ability to develop and document repeatable processes and procedures that others can execute.
• Ability to participate in the department's approved after-hours maintenance or incident-response process.

Nice To Haves

• CompTIA CySA+ or Security+, ISC2 SSCP, Security Blue Team BTL1, GIAC GSEC, Microsoft, cloud, or comparable documented professional development.
• Scripting or automation experience in PowerShell, Python, APIs, platform workflows, or a comparable method.
• Experience with cloud platform security controls in Microsoft Azure, Microsoft 365, AWS, Google Cloud, or another major cloud provider.
• Experience supporting audits, regulatory examinations, access reviews, control testing, or evidence collection.
• Regulated financial services experience with exposure to NCUA 12 CFR Part 748, FFIEC examination guidance, GLBA-related safeguards, payment-card requirements, or similar control expectations.

Responsibilities

• Configure, maintain, monitor, and troubleshoot assigned security platforms across endpoint protection and EDR, identity and access management, email and web security, vulnerability management, firewalls, IDS/IPS, SIEM and centralized logging, cloud, data protection, and related controls.
• Independently investigate routine alerts using endpoint, identity, network, email, cloud, and SIEM data, documenting the reasoning behind disposition and escalation decisions.
• Operate vulnerability-management workflows from scan coverage and finding validation through ownership, due dates, exception routing, and verified closure.
• Tune detection rules, dashboards, alert thresholds, and operational queries to reduce noise while retaining true-positive coverage.
• Support containment, evidence gathering, recovery, communication, after-action review, and control-improvement work during incidents.
• Plan and implement approved routine security changes, participate in review of higher-risk changes, and contribute security requirements and testing to technology projects.
• Create and maintain runbooks, standards, diagrams, queries, dashboards, troubleshooting notes, and documentation that another team member can execute unaided.
• Use PowerShell, Python, platform workflows, APIs, or similar methods to reduce manual effort, improve accuracy, and strengthen traceability, with appropriate review and secure credential handling.
• Support audits, regulatory examinations, access reviews, risk assessments, control testing, remediation validation, business continuity, disaster recovery, and tabletop exercises.
• Help onboard and coach Information Security Specialists.
• Communicate security requirements, impact, risk, and resolution clearly to technical and non-technical audiences.

Benefits

• Community First supports employees at all stages of their careers in deepening their professional skills and pursuing certifications, credentials, and ongoing education.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level