Senior IT Security Analyst

First Busey • Frisco, TX

66d • $86,000 - $123,000

About The Position

The Senior IT Security Analyst is responsible for managing activities relating to monitoring and responding to security events. The analyst is responsible for monitoring application, host, and network threats, including external threat actors and rogue insiders. As a trusted member of the Information Security team and industry community, the analyst works closely with internal technical teams, business units, and external entities aligned with the business, including private intelligence-sharing groups, law enforcement, and government agencies. The analyst is responsible for conducting in-depth research, documenting threats, understanding the risk to the business, and sharing information with those who need to know. Analysts are expected to continually adapt to stay a step ahead of cyber attackers and stay up to date on the latest methods attackers use to infiltrate computer systems. Analysts in this role are expected to consistently learn and grow. This is not a passive career opportunity, but rather one that requires a passion for security and rigor to protect the business.

Requirements

• Strong experience with threat information sharing and threat hunting processes
• Proficient with SIEM tools, threat intelligence platforms, and SOAR solutions
• Knowledge and understanding of networking concepts and securing traffic across LAN, WAN, and Internet infrastructure
• Proficiency in operating systems such as Windows, Linux, and MacOS
• Experience in incident handling and investigation including using formal chain-of-custody methods
• Applicable knowledge of adversary tactics, techniques, and procedures (TTPs), MITRE ATT&CK framework, and CVSS
• Capable of scripting in Python, Bash, Perl, RegEx, or PowerShell
• Familiarity with cloud architectures, security standards, and best practices
• Strong oral and written communication skills
• Strong organizational skills and attention to detail
• Excellent interpersonal skills

Nice To Haves

• Bachelor's degree in Computer Science, Management Information Systems (MIS) or related field or equivalent work experience
• On-the-job training in relevant roles relating to security operations, threat intel and hunting, system administration, incident response, or equivalent
• Security+, CySA+, GCIH, CSA, CCSP or similar certification; or willingness and ability to pursue certification/re-certification within the first six months of hire
• At least 5 years' experience in security operations center environments, threat intelligence/hunting, or security systems administration
• Knowledge of Microsoft Office and other productivity tools

Responsibilities

• Develop, manage, and maintain threat intelligence and threat hunting program and processes
• Research and identify emerging threats, TTPs in public and closed forums, and work with colleagues to assess risk and implement/validate controls as necessary
• Assist with Security Operations activities, including triage of alarms/alerts, and performing technical security assessments
• Participate in a call tree for outsourced Security Operations Center to assist with triage and remediation of critical and high rated alerts
• Research and recommend solutions to fulfill regulatory compliance with standards set forth by FFIEC guidelines, Sarbanes Oxley, Gramm-Leach-Bliley and other regulations
• Perform periodic review of IT procedures and security of all systems to maintain integrity of company and customer data
• Document and perform verification of IT related changes in accordance with Company security policies and procedures
• Research and recommend hardware and software solutions to augment or enhance existing security measures
• Stay current in events and trends in IT security
• Investigate and report any security violations and incidents and ensure proper protection and corrective measures have been taken
• Conduct scheduled reviews of key application security settings
• Develop metrics and scorecards to measure risk to the organization, as well as effectiveness and efficiency of SOC associates
• Assist in process development and improvements to maximize the efficiency and effectiveness of the department and related programs
• Support audit and incident processes, as required
• Monitor and support internal SEIM systems, reports, and searches
• Monitor and support internal phishing email report systems and reports
• Partner and establish relationships to work closely with cross-functional teams
• Develop strong liaison relationships with key internal business and technology teams
• Coach level I & IIs on security domains and program processes
• Participate in security work streams for a variety of enterprise projects and initiatives
• Determine and communicate security risk postures to partners and leaders as appropriate

Benefits

• 401(k) match
• Profit sharing
• Employee stock purchase plan
• Paid time off
• Medical insurance
• Dental insurance
• Vision insurance
• Company-paid life insurance
• Long-term disability
• Supplemental voluntary life insurance
• Short-term and long-term disability
• Wellness incentives
• Employee assistance program
• Pre-tax health savings accounts
• Flexible spending accounts

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree
• Number of Employees: 501-1,000 employees