Cybersecurity Analyst I

As part of the Information Security team, the Cybersecurity Analyst I will play a key role in maintaining and enhancing the security posture of Tower Federal Credit Union. The Analyst will be responsible for monitoring security systems, responding to incidents, and assisting in the implementation of security measures. Other responsibilities include supporting vulnerability management and remediation, security awareness, compliance and reporting, administration of designed security controls, and providing operational support.

Monitor security alerts, logs, and reports from various security systems, including SIEM, firewalls, intrusion detection and prevention systems, and endpoint security controls. Analyze security events to identify potential threats and vulnerabilities. Assist in the triage and escalation of security incidents to senior team members when necessary. Participate in daily business-day and weekly on-call security operations rotation.

Participate in incident response activities, including investigating security incidents, documenting findings, and supporting mitigation efforts. Help coordinate incident response activities with internal teams and external parties as needed. Maintain accurate records of incidents and actions taken in accordance with incident response procedures.

Assist in conducting vulnerability assessments and scans of the credit union’s technology systems. Track and document the status of identified vulnerabilities and with the ITS teams to ensure timely remediation. Support the development and maintenance of the credit union’s vulnerability management program.

Assist in the development and delivery of security awareness programs and training for employees. Stay updated on current cybersecurity threats and trends to help inform training content and internal communications. Promote a culture of security awareness throughout the organization.

Help ensure the credit union’s compliance with relevant security regulations and standards, including GLBA, FFIEC, and NCUA guidelines. Prepare and maintain documentation for audits, assessments, and regulatory reporting. Assist in developing security policies, standards, procedures, and guidelines.

Support the configuration, deployment, and management of security tools and technologies. Assist in maintaining access control measures, ensuring appropriate permissions are granted and monitored. Collaborate with ITS and other departments to ensure security controls are effectively integrated across systems. Provide operational support by triaging, responding, and managing incident and service request tickets.

Maintains and expands current job knowledge demonstrated by retaining required certifications and successfully participating in educational and relevant training opportunities.

Performs related duties as assigned.

AA in the field of Information/Cyber Security, Information Systems or a related field and at least two to three years directly related work experience required.

Or Equivalent combination of education and experience.

Entry-level certifications such as CompTIA Security+, GIAC Security Essentials (GSEC), etc., a plus

Strong attention to detail and the ability to identify patterns or anomalies in security data. Basic problem-solving skills, with a willingness to learn and grow in analyzing security issues.

Excellent verbal and written communication skills, with the ability to document incidents and security observations clearly. Ability to communicate effectively with team members and potentially non-technical stakeholders.

Ability to work effectively in a team environment, supporting senior analysts and collaborating on security tasks. Willingness to learn from and contribute to the team’s strategic goals and objectives.

A strong desire to stay current with the latest cybersecurity trends and threats. Openness to feedback and the ability to adapt to new tools, technologies, and processes.

Basic time management skills, with the ability to handle multiple tasks and prioritize effectively under supervision. Ability to meet deadlines and manage routine tasks effectively.

Understanding of basic cybersecurity principles, such as confidentiality, integrity, and availability (CIA triad). Familiarity with common cybersecurity threats and attack vectors.

Basic understanding of organizational security policies and standards and the ability to follow established procedures. Willingness to contribute to the development and enhancements of security documentation.

Familiarity with common security frameworks and standards such as the CIS Critical Security Controls, MITRE, and NIST.

Basic knowledge and experience monitoring and analyzing logs and alerts from a wide variety of technology including firewall, IDS/IPS, proxy, endpoint detection and response (EDR) and authentication platforms. Foundational knowledge and experience developing queries for detection and alerting within SIEM platform.

Basic knowledge and experience utilizing enterprise vulnerability management platforms. Understanding of system and application security threats and vulnerabilities and developing remediation recommendations.

Foundational knowledge and experience managing endpoint security controls (i.e. Next-Gen Antivirus/Endpoint Detection and Response (EDR) and application whitelisting).

Foundational knowledge and experience managing network security controls (i.e. firewalls, intrusion detection/prevention systems, VPN, and email/web security applications).

General knowledge and experience administering Microsoft Window desktop and Server operating systems. Basic knowledge and experience administering Linux operating systems and utilizing the command-line interface.

Knowledge of TCP/IP protocols and common applications.

Knowledge of cryptography and encryption.

Knowledge of physical and environmental security.

Fundamental knowledge of security architecture and design.

Fundamental knowledge of Identity and Access Management concepts and principles

Ability to work effectively under stress and maintain approved work schedules.

Ability to facilitate group discussion and gain consensus.

Ability to maintain sensitive and confidential information.

Ability to interact effectively and professionally with colleagues and managers.

Has knowledge of and adheres to credit union policies and procedures and all regulations related to the bank Secrecy Act, the USA Patriot Act and OFAC.

Ability to work the hours needed which may extend beyond the defined work schedule when operating conditions dictate.

24x7 availability via mobile and landline communications to support Information Security operations and emergencies.

Ability to independently and directly travel to all Tower facilities as needed.

Must be able to visually and physically check/inspect cabling beneath and/or behind objects such as desks, personal computers, printers, etc. This may include moving or lifting computer equipment from or to a desk, floor, or tables weighing up to 15 lbs., with or without assistance, in compliance with ADA.