IT Security Analyst

JOB SUMMARY: The Information Security Analyst will report to the Manager of IT Operations and will work closely with all Information Systems department staff to assess and reduce information security risks and ensure compliance with established financial institution regulations. This role is responsible for answering phone calls & responding to security related emails, daily security alert monitoring and reporting, security information and event management (SIEM), annual risk assessment assistance, daily\monthly\quarterly logical access reviews, audit response assistance, and security policy maintenance.

RESPONSIBILITIES/TASKS:

Perform:

• Daily security alert and log monitoring (SolarWinds, Central Log, Virus, IPS, DLP, Web Content, Secure Email, and Active Directory Changes). Assist with monthly\quarterly alert and log management reporting
• Daily, answering of phone calls in the SOC queue while maintaining PFFCU service levels and customer support
• Daily, activities on all helpdesk tickets coming into the security team while maintaining PFFCU service levels and customer support
• Daily, monthly and quarterly security device and configuration reviews
• Daily, monthly and quarterly and semi-annual logical access reviews
• Utilize PFFCU’s InfoSec governance risk & compliance platform to manage quarterly vulnerability reporting and remediation activities and partner with IS teams to ensure security patching stays on target

Assist with:

• Periodic 3rd Party security risk reviews and reporting
• Data collection to support external and internal auditors
• Evaluation and suggest improvements to PFFCU’s security information and event management solution (SIEM)
• Documentation of security incidents as a part of the CSIRT team
• Information security policy review to ensure all policies meet annual review guidelines and when required, create new policies to address gaps and new regulations

Maintain knowledge of:

• The latest NCUA and GLBA financial institution regulations
• PFFCU departments and functions and effectively interface with staff at all levels
• Administration of all Security processes within PFFCU
• Security centric application Support for Windows OS and numerous 3rd party applications
• Assisting in the revisions and updating of IT departmental procedures
• Experience with XDR platforms such as Windows Defender\ MS End Point protection\Cisco Amp\Trellix
• General knowledge\experience in Active Directory

Ownership

• Taking ownership of service requests and working them through the entire process within PFFCU
• Participating in key process improvements
• When appropriate engaging outside contractors with proper technical expertise
• Working within the escalation process\procedures through all levels of support within PFFCU
• Primary responsibility for Virus and PUA alerts
• Provide coordination\escalation and hands on work with internal IT Teams by answering internal staff calls and tickets
• Assist in documenting internal support processes and procedures
• Implementing and enforcing system and data security measures
• Working closely with all teams in technology on projects of all scopes, including complex and cross-functional efforts
• Ensuring timely completion of projects and deployments
• Working knowledge of a variety of network perimeter security technologies including:
• Firewalls
• Web Filter
• Intrusion Detection/ Protection Systems
• Network Based Data Loss Prevention
Other duties as assigned

QUALIFICATIONS:

• 3 years of experience with Security\InfoSec Support
• Must possess excellent customer service skills and be able to work independently and with a team in a highly customer-focused environment
• Basic understanding of Windows desktops\laptops
• Basic understanding of VPN Connections
• Must understand SLA's (Service Level Agreements) and where applicable
• discuss and review within the team\end user.
• Organization skills a must
• Bachelor’s degree in technical field; or related experience and/or training; or equivalent combination of education and experience is required
• Must possess effective written and verbal communication skills
• Knowledge of monitoring technologies\methods relating to IT
• Strong understanding of IT Systems as well as strong technical aptitude and problem solving skills are needed to perform this job successfully
• Demonstrated technical knowledge of perimeter security devices and configuration
Ability to assess problems and situations possesses analytic ability and good judgment

SKILLS/KNOWLEDGE/ABILITIES REQUIRED:

• Strong project skills required, specifically the ability to maintain focus and complete projects with multi-month timeframes
• Ability to handle multiple projects at the same time
• Ability to think logically and visualize abstract concepts
• Strong interpersonal skills
• Ability to clearly communicate technical information to individuals at all levels of the organization and with vendors
• Ability to work under pressure
• Ability to work under own timelines-direction
• Ability to work varying hours. Sometimes includes evening and additional weekend work
• Job may require travel to remote locations
• Participate in the on-call rotation within the Information Security Team
• Core hours are Monday -Friday 8:00 AM – 4:00 PM