Sr Info Security Analyst
About The Position
The Sr. Information Security Analyst designs, configures, administers, and monitors the Bank’s information security controls. The role assists the CISO with risk assessment activities, security control selection and implementation, and documentation while executing the Information Security Program. It also supports incident response and may require after-hours assistance when production issues affect security controls. The position supports security operations, risk assessment, security technology research, automation, system and activity documentation, change management, and security-related MS SQL database administration. Scheduled on-call duties include after-hours end-user support and responding within management-established service levels. Personnel may also be expected to respond to critical situations when not scheduled for on-call duty. The role must comply with applicable state and federal banking laws and regulations and internal policies, including requirements related to BSA, AML, OFAC, CIP, financial elder abuse reporting, sexual harassment prevention, information security, and privacy. Work is primarily performed in an office environment with controlled temperature and standard office conditions. This position requires a mandatory absence of two consecutive weeks each calendar year. The position is not eligible for an Officer Title.
Requirements
- Minimum of six years of applicable security and system administration experience.
- Bachelor’s degree in computer science or equivalent.
- Understanding of information security concepts and domains.
- Experience administering Windows and Linux servers or network systems, including Arista, Cisco, or HP.
- Understanding of or experience with firewalls, including Fortinet, web application firewalls, IDS/IPS, email encryption gateways, vulnerability scanning tools, and forensics tools.
- Exposure to capturing and decoding logs or packets and recognizing attack signatures such as SQL injection and cross-site scripting.
- Experience collaborating with vendors to implement security-related projects.
- Strong understanding of Microsoft Active Directory access rights, user access provisioning, SQL access, and operating system security.
- Working knowledge of Microsoft Azure, M365 cloud security, and InTune.
- Knowledge of Ethernet, TCP/IP, DHCP, DNS, Active Directory, and enterprise-level backup software.
- Experience with SIEM systems such as SumoLogic or Splunk.
- Effective verbal and written communication, including documenting activities, drafting reports, and presenting findings and recommendations.
- Clear understanding of spoken and written English.
- Customer service, time management, project planning, and execution skills.
- Attention to detail, critical thinking, sound judgment, and problem-solving skills.
- Ability to actively listen and learn, work independently and collaboratively at all levels, communicate respectfully with supervisors and coworkers, and effectively deal with unpleasant, angry, or discourteous people.
- Ability to perform repetitive office and computer-based movements, sit or stand for extended periods, lift, carry, or move objects up to 25 pounds, and use hands and fingers to operate standard office equipment, with or without reasonable accommodation.
- Compliance with applicable banking laws, regulations, and internal policies related to lending, operations, deposits, BSA, AML, OFAC, CIP, financial elder abuse reporting, sexual harassment prevention, information security, and privacy.
Nice To Haves
- Security certifications from GIAC, ISC2, or CompTIA, such as CISSP, SSCP, CCSP, GCIH, or CEH.
- Microsoft Cloud certifications, such as Microsoft Certified: Azure Security Engineer Associate.
- Microsoft Certified: Cybersecurity Architect Expert.
- Penetration testing experience.
Responsibilities
- Select, design, configure, administer, and monitor security controls while maintaining system reliability, performance, and availability.
- Contribute to IT and information security risk assessment documentation using knowledge of risks and controls.
- Research and develop security technologies to assess, monitor, or reduce enterprise vulnerabilities.
- Automate security activities and data analysis using scripting and data management tools, including Python, PERL, and PowerShell.
- Document work activities in activity logs, periodic reports, problem and change management systems, project tracking systems, and similar systems.
- Document system design and configuration information accurately and in accordance with business writing standards.
- Follow change management procedures and minimize disruption to production systems through sound judgment and due care.
- Administer security-related MS SQL databases.
- When scheduled for on-call duty, provide after-hours end-user support and meet response-time and service-level guidelines.
- Keep cell phones available for end-user support calls or outage alerts when on call, and respond to critical situations when required.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
