Security Operations Center Analyst II (SOC Analyst II

Who We Are

At Old Second, you're first! For more than 150 years, Old Second has consistently put businesses and individuals throughout the Chicago area first, and we're only getting started.

With great employees we've grown from a single location in the back of a general store to 50 locations and over $6 billion dollars in assets. At Old Second we embrace values that foster an environment of community and growth. Recently, we've been voted a Forbes Best-In-State Bank for Illinois by our customers. Be a part of something big as we continue our growth story together!

Position Overview:

The Security Operations Center (SOC) Analyst supports the Information Security Program through security monitoring, incident response, threat intelligence, vulnerability management, user access governance, operational resilience activities, and administration of security technologies. The Analyst assists in protecting the confidentiality, integrity, and availability of Bank information assets through analysis, investigation, reporting, and remediation of cybersecurity events.

The SOC Analyst partners with Information Technology, Fraud, Risk Management, Vendor Management, Legal/Compliance, and business units to investigate incidents, support regulatory and audit activities, maintain operational readiness, and continuously improve the Bank's cybersecurity posture. Responsibilities and ownership vary by position level.

Security Operations Center Analyst
- All Levels

Provides first response support by analyzing alerts and gathering information about potential incidents or vulnerabilities.

• Conduct first-level triage of security events and incidents, including phishing attempts, malware detections, dark-web exposures, suspicious email activity, and security tool alerts.
• Investigate suspicious emails identified through email security systems or reported by employees.
• Administer Business Email Compromise (BEC) response activities, including quarantine actions, email release reviews, and coordination with Fraud and Information Technology teams.
• Assess, prioritize, document, and elevate security alerts generated by security monitoring technologies according to established procedures and incident response playbooks.
• Perform security event investigations utilizing SIEM, EDR, email security, threat intelligence, and other security monitoring platforms.
• Document findings, collect evidence, and maintain incident records throughout the Incident Response Lifecycle.
• Execute incident response procedures and playbooks for assigned events and assist with containment, eradication, and recovery activities.
• Create remediation tickets and monitor assigned corrective actions through completion.
• Monitor threat intelligence feeds, vulnerability disclosures, vendor security notifications, and emerging threats that may impact Bank operations.
• Monitor external indicators including spoofed websites, brand abuse, leaked credentials, compromised vendors, and supply-chain cyber events.
• Assist in the administration and maintenance of assigned Information Security technologies.
• Compile and prepare operational metrics and reports related to incidents, phishing activity, vulnerabilities, patch status, security awareness activities, and other Information Security indicators.
• Support user access review execution by collecting access materials, validating user and role information, identifying exceptions, and supporting remediation efforts.
• Participate in Business Continuity Planning and operational resilience activities, including tabletop exercises, vendor outage scenarios, disaster recovery testing support, and lessons-learned documentation.
• Participate in security reviews of new technologies and business solutions as assigned.
• Support the collection of evidence and documentation required for audits, examinations, compliance reviews, and risk assessments.
• Perform daily operational review activities and other Information Security monitoring tasks as assigned.

Additional Responsibilities for Security Operations Center Analyst
- Level II

Provides second-level response support by analyzing complex security alerts, validating findings, coordinating escalations, and supporting…