Cybersecurity Analyst Senior

ECMC Group is a nonprofit corporation focused on helping students succeed. Headquartered in Minneapolis, ECMC Group and its family of companies provide financial tools and services, as well as funding for innovative programs to help students achieve their academic and professional goals.

The Cybersecurity Analyst Senior is responsible for ensuring the security of our cloud infrastructure. This role involves developing and implementing security measures, monitoring security breaches, and responding to security incidents. The Cloud Security Analyst Senior will work closely with Senior IT and IT Security staff to ensure compliance with security policies and best practices. In addition, this role is responsible for monitoring and responding to security information events across multiple locations throughout the United States on a 24x7 basis, as needed.

• Investigates and resolves level 2 information security events and escalates as needed to engineers for further triage.
• Designs, implements, and manages security measures for cloud-based systems.
• Conducts regular security assessments and audits.
• Collaborates with IT and development teams to ensure secure deployment of applications.
• Troubleshoots domain accounts, business applications, and infrastructure system accounts through the entire lifecycle (creation, modification, deletion) throughout the enterprise.
• Responds to inquiries regarding logs and reports of domain controllers, business applications and infrastructure systems.
• Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security procedures, and systems, including hardware, firmware and software.
• Assists and executes in partnership with engineers with configuration of correlation and workflow rule sets as needed to counter current and future information security threats.
• Assists with creating and maintaining department and enterprise security documentation including policies, standards, guidelines, procedures, designs and solution architectures.
• Investigates and resolves level one security incidents and escalates to senior analysts or engineers for further triage.
• Assists with resolution of request/fulfillment incidents for assigned security systems.
• Assists with tuning security systems so events and alarms provide optimal value.
• Participates in on-call rotation during business hours.
• Develops SOC related electronic security controls for event correlation and incident monitoring and response.
• Works with internal and external project managers to complete projects on time and leads or participates in IT projects to provide information security expertise, guidance, or training.
• Participates in compliance audits such as FISMA reviews, SOC audits, etc.
• Stays current on the latest cloud security threats, vulnerabilities, and trends.
• Performs other duties as assigned.

• Bachelor’s degree in computer science, information technology, cybersecurity or related field; or an additional 2 years of experience in lieu of degree
• 5+ years of experience in cloud security or related field
• Strong knowledge in Active Directory User Groups, Microsoft Exchange and service management systems
• Strong knowledge of cloud platforms (AWS, Azure, and Google Cloud)
• Strong experience with security tools and technologies (e.g. firewalls, intrusion detection)
• Must be able to work extended hours, including nights and weekends, to complete assignments, and provide 24/7 operations support when necessary

• Knowledge of student loan and/or financial services industry
• ISC2 SCCP, GIAC certifications, CompTIA Security+, AWS Associate of Solution Architecture, AWS Security Specialty Certification or similar certifications preferred

The pay range for this position is $115,000-$125,000. Actual compensation may vary based on factors such as relevant experience, peer and market benchmarks, and geographic location. This position is classified as hybrid Monday - Wednesday and requires attendance in Minneapolis, MN. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The…