Sr Info Security Analyst

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time 2 Professional Seal Beach, CA, US

2 days ago Requisition

Salary Range: $ To $ Annually

The Sr. Information Security Analyst designs, configures, administers, and monitors information security controls for the Bank. This position assists the CISO with risk assessment activities, selecting and implementing security controls, and documenting the results of their activities while executing the Information Security Program. The Sr. Information Security Analyst assists with incident response and may require after-hours support if there are production issues with security controls.

• Responsible for the selection, design, configuration, administration, and monitoring of security controls, including maintaining reliability, performance, and availability of the systems.
• Contributes to IT and Information Security risk assessment documentation using an understanding of IT and Information Security risks and controls.
• Participates in research and development of security technologies that will assess/monitor/reduce vulnerabilities for the enterprise.
• Responsible for automating security activities and data analysis via system automation scripting and data management (Python, Power Shell).
• Responsible for documenting work activities in activity logs, periodic reports, problem management systems, change management systems, project tracking systems, and other similar systems.
• Responsible for documenting system design and configuration information.
• Documentation must be factually accurate and conform to business writing standards with minimal spelling, grammatical, or syntactical errors.
• Responsible for following Change Management procedures and minimize disruption to production systems by exercising good judgment and due care.
• Automating security activities and data analysis via system automation scripting and data management (Python, PERL, Power Shell)
• Security-related MS SQL database administration

When scheduled for on-call duty, responsible for all end-user support after hours, and ensuring that response times and service levels are within the guidelines established by management. Bank Security personnel must ensure that cell phones are on and available in the event of end-user support call or outage alert via text message. Bank Security personnel may be expected to be available to respond to critical situations, even if not scheduled for on-call duty.

Complies with all applicable state and federal banking laws, regulations, and internal policies related but not limited to lending, operations, and deposit requirements, including Bank Secrecy Act (BSA), Anti-Money Laundering (AML) requirements, Office of Foreign Assets Control (OFAC) regulations, Customer Identification Program (CIP) requirements, Financial Elder Abuse reporting laws, Sexual Harassment prevention policies, information security and privacy requirements.

• Understanding of information security concepts and domains.
• Experience administering Windows and Linux servers or network systems (Arista, Cisco, HP).
• Understanding and/or experience with the following security technologies, firewalls (Fortinet), web application firewalls, IDS/IPS, e-mail encryption gateways, vulnerability scanning tools, forensics tools.
• Exposure to log/packet capturing & decoding of various attack signatures, such as recognizing SQL injections, cross-site scripting attacks, etc.
• Experience collaborating with vendors to implement security-related projects.
• Strong understanding of Microsoft Active Directory access rights, user access provisioning, SQL access and Operating System security.
• Working knowledge of Microsoft Azure, M365 cloud security, and InTune.
• Exposure to log/packet capturing & decoding of various attack signatures, such as recognizing SQL injections, cross-site scripting attacks, etc.
• Ethernet, TCP/IP, DHCP, DNS, Active Directory and enterprise level backup software.
• Experience with SIEM systems such as Sumo Logic or Splunk.

• Effective verbal and written communications, including documenting activities, drafting reports, and presentation skills for findings and recommendations.
• Clear understanding of the English language (spoken and written)
• Project planning and execution…