Cybersecurity Analyst

WHAT YOU WILL DO EVERYDAY

Monitors cybersecurity system operations to protect the credit union's networks and systems. Uses cybersecurity tools to monitor and proactively search for threats to systems or networks; and focuses on the confidentiality, integrity and availability of data.

Conducts network/system defense analysis and provides recommendations for improvements. Develops and maintains thorough, up-to-date knowledge of cybersecurity threats and incident response best practices. Collaborates with peers and stakeholders to establish and ensure consistent response practices and prioritize security events. Acts as a resource for on‑going information security audits and assessments.

Works independently with general supervision; exercises judgment within defined guidelines and practices to determine appropriate action.

Direct Reports:
None

30% Monitor the Security Information and Event Management (SIEM) and MDR systems. Ensure systems are always operating with current and complete configuration information, are collecting and analyzing security data, and generating regular reports and security alerts. Take prompt action on alerts, performing initial threat hunting, so that anomalies and abnormal behavior can be investigated.

25% Monitor the Vulnerability Management system to ensure the discovery, management, and remediation of vulnerable assets in the enterprise. Communicate vulnerability findings with the owners of assets or applications for remediation and provide guidance on criticality and remediation efforts. Assist with implementation of approved remediation steps on applicable systems.

15% Monitor vulnerability bulletins and industry publications to stay informed of high‑priority breaches and patches that affect credit union systems.

15% Assist with monitoring and enforcement of system hardening efforts.

15% Assist with analysis and completion of cybersecurity audits, assessments and vendor due diligence processes.

-- Must comply with all company policies and procedures, applicable laws and regulations, including but not limited to, the Bank Secrecy Act, the USA PATRIOT Act, the Office of Foreign Assets Control, AML/CIP, Consumer Privacy, Regulation CC, Information Security, Bank Protection Act, FACT‑Identity Theft, Information Technology and GLBA.

5+ years experience including:

• Email security protocols including DKIM, DMARC, and SPF
• Enterprise class email security appliances/gateway
• Modern Microsoft Windows Server Versions
• Microsoft Active Directory
• Mobile Device Management (MDM) platform
• Microsoft Entra /Purview
• Scripting knowledge using Power Shell or related scripting language
• Mail and Web filtering and secure delivery
• MDR
• Strong Communication and coordination skills with internal departments and third party vendors
• Detailed Documentation
• Internal and external information and cybersecurity assessments and audits

High school diploma

CompTIA Security+ or similar preferred

• Ability to perform and deliver under pressure.
• Ability to work with and participate in a high performing team.
• Professional level of verbal and written communication skills are essential to the position.
• Proficiency in Microsoft Office (Outlook, Word, Excel, PowerPoint).
• Demonstrated knowledge of Credit Union regulations, products, policies, procedures, and services.
• Advanced analytical skills for a variety of tasks or projects.
• Ability to drive oneself to take initiative and action to pursue goals and complete tasks.
• Ability to deal with complex problems involving multiple facets, variables and situations.
• Ability to provide world class member service while executing Interra’s vision, mission, and delivery of Core Values.

• Courtesy and tact are essential elements of the job.
• Work involves personal contact with customers and others inside and outside the organization, generally regarding fairly routine matters for the purposes of giving and obtaining information or instructions, updating or referring.
• Communications generally require shorter and not in-depth discussions.

• Adaptable - Maintains…