Information Security Analyst; on site

Full time opening for a Security Analyst. This role is on site to start and offers 1-2 WFH options once established. The Information Security Analyst supports the organization’s information security operations by monitoring security events, investigating potential threats, managing access reviews, and helping ensure compliance with financial industry regulations. This professional works closely with IT teams to identify and mitigate security risks, respond to incidents, support audits, and strengthen security controls and procedures.

Key Responsibilities

• Perform daily security alert and log monitoring, including reviewing suspicious activity and escalating potential security incidents.
• Utilize Splunk SIEM for security event monitoring, analysis, reporting, and investigation.
• Manage security-related service requests, troubleshoot issues, and provide responsive support to internal users.
• Conduct routine security device, configuration, and logical access reviews.
• Track vulnerabilities, coordinate remediation efforts, and work with IT teams to maintain security patching standards.
• Assist with security incident documentation, audit requests, third-party risk assessments, and annual risk assessments.
• Maintain and update information security policies, procedures, and compliance documentation.
• Support endpoint security, antivirus, and threat detection tools while helping improve security processes and controls.

Qualifications

• At least three years of experience in information security, cybersecurity, or security support.
• Required:
  Hands-on experience with Splunk SIEM for security monitoring, alert analysis, and investigation.
• Knowledge of Windows operating systems, Active Directory, VPN connectivity, and IT systems.
• Familiarity with endpoint detection and response (EDR/XDR) platforms, such as Microsoft Defender, Cisco AMP, or Trellix.
• Understanding of network perimeter security technologies, including firewalls, web filtering, intrusion detection and prevention systems, and data loss prevention.
• Knowledge of security policies, vulnerability management, access controls, and incident response processes.
• Familiarity with financial institution regulations, including NCUA and GLBA, is beneficial.
• Strong analytical, troubleshooting, organizational, and communication skills, with the ability to manage competing priorities and work independently or collaboratively.
• Bachelor's degree in a technical field or equivalent education and experience.