Senior Information Security Analyst

2355 W Pinnacle Peak Rd, Phoenix, AZ 85027

Join Us in Making an Impact

At OneAZ Credit Union, our success is measured only by yours. We’re here to create lasting change in the lives of our members, our communities, and our team. If you're looking for a career with purpose, where your work truly matters—you've found it!

You’reimpactful, compassionate, and fearless,ready to embrace new challenges and shape the future of financial well-being. You take accountability for our success and thrive in an environment where curiosity is celebrated. If this sounds like you,let’sbuild something great together.

This position will be located at our Corporate Office: 2355 W Pinnacle Peak Rd, Phoenix, AZ 85027

We are seeking a highly skilled and motivated Senior Information Security Analyst to join our team in the financial services sector. This role performs advanced security monitoring, investigation, platform administration, vulnerability management, incident response coordination, security‑tool development support, and security process improvement. The ideal candidate will have a strong background in information security, with experience in security event monitoring and analysis, Azure security, Microsoft 365 monitoring and analysis, endpoint security, email security, vulnerability management, network traffic analysis, incident response, project leadership, and security process documentation.

The individual should demonstrate a proactive mindset, communicate effectively with technical and non-technical audiences, and possess familiarity with emerging AI security concepts.

• Assist with the development and improvement of security tools, configurations, detections, and operational workflows.
• Evaluate and deploy technologies to mitigate risks and ensure compliance with financial regulations.
• Perform security monitoring, alert triage, analysis, investigation, and escalation across SIEM, Azure, Microsoft 365, endpoint, email, and network-security telemetry.
• Support security awareness presentations and training activities for technical and non-technical audiences.
• Monitor and administer Crowd Strike Falcon to support endpoint threat detection, investigation, and response.
• Conduct email security analysis, including investigation of suspicious messages, links, attachments, and sender activity.
• Administer Rapid7 InsightVM and coordinate vulnerability scanning, remediation tracking, validation, and reporting.
• Analyze network traffic and related telemetry to identify suspicious activity and security exposures.
• Conduct threat assessments and security risk evaluations.
• Coordinate incident response and recommend improvements.
• Conduct security reviews of network architecture and assess risks.
• Conduct audits of endpoint, network, and system security controls.
• Work with monitoring and response teams to identify new threats.
• Lead or coordinate security projects, including planning, stakeholder communication, execution, and status reporting.
• Develop, maintain, and improve standard operating procedures (SOPs) for recurring security operations and response activities.
• Proactively identify security gaps, process improvements, and opportunities to strengthen monitoring and response capabilities.
• Assist and mentor team members in security tools and processes.

• High School Diploma or GED Required
• Bachelor's degree in Information Security, Computer Science, or a related field.
• 3-5 years of experience in Information Technology, ideally at the enterprise level.
• Experience in financial services or a regulated industry is highly preferred.
• Equivalent combinations of education, certifications, and hands‑on experience will be considered.
• Familiarity with financial regulations and compliance frameworks, including PCI‑DSS, GLBA, and FFIEC.
• Relevant technical certifications such as Crowd Strike Certified Falcon Administrator (CCFA), GIAC Certified Incident Handler (GCIH), or Microsoft Certified:
  Security Operations Analyst Associate are preferred.
• Prior experience leading or coordinating security or technology projects.
• Experience writing, maintaining, and operationalizing standard operating procedures (SOPs).
• Prior…