IT Security Analyst

Job Summary:

The Information Security Analyst will report to the Manager of IT Operations and will work closely with all Information Systems department staff to assess and reduce information security risks and ensure compliance with established financial institution regulations.

Responsibilities:

Perform daily security alert and log monitoring (SolarWinds, Central Log, Virus, IPS, DLP, Web Content, Secure Email, and Active Directory Changes). Assist with monthly and quarterly alert and log management reporting. Daily, answering of phone calls in the SOC queue while maintaining PFFCU service levels and customer support. Daily, activities on all helpdesk tickets coming into the security team while maintaining PFFCU service levels and customer support. Daily, monthly and quarterly security device and configuration reviews. Daily, monthly and quarterly and semi-annual logical access reviews. Utilize PFFCU's InfoSec governance risk & compliance platform to manage quarterly vulnerability reporting and remediation activities and partner with IS teams to ensure security patching stays on target.

Assist with:
Periodic 3rd Party security risk reviews and reporting. Data collection to support external and internal auditors. Evaluation and suggest improvements to PFFCU's security information and event management solution (SIEM). Documentation of security incidents as a part of the CSIRT team. Information security policy review to ensure all policies meet annual review guidelines and when required, create new policies to address gaps and new regulations.

Requirements:

3+ years of experience with Security/InfoSec Support. Must possess excellent customer service skills and be able to work independently and with a team in a highly customer-focused environment. Basic understanding of Windows desktops/laptops. Basic understanding of VPN Connections. Must understand SLA's (Service Level Agreements) and where applicable discuss and review within the team/end user. Organization skills a must. Bachelor's degree in technical field; or related experience and/or training; or equivalent combination of education and experience is required. Must possess effective written and verbal communication skills. Knowledge of monitoring technologies/methods relating to IT. Strong understanding of IT Systems as well as strong technical aptitude and problem solving skills are needed to perform this job successfully. Demonstrated technical knowledge of perimeter security devices and configuration. Ability to assess problems and situations possesses analytic ability and good judgment.

---