Description

Summary: The Cybersecurity Analyst is responsible for monitoring, identifying, investigating, and responding to cybersecurity threats and vulnerabilities across Tropical Financial Credit Union. This position supports the protection of systems, networks, endpoints, applications, and sensitive information through security monitoring, vulnerability management, incident response, and security control administration. The position works closely with the Information Security Officer, Information Security Team Lead, IT teams, vendors, and business units to maintain and continuously improve the Credit Union's cybersecurity posture.

Essential Duties and Responsibilities include the following:

§ Provide service that meets the Service Standards defined by Tropical Financial Credit Union and achieve annual goals established through the Performance Management Process.

§ Monitor security alerts and events from endpoint, firewall, identity, email security, and other cybersecurity platforms.

§ Investigate suspicious activity, security incidents, malware, phishing attempts, unauthorized access, and other cybersecurity threats.

§ Perform initial triage and escalation of cybersecurity incidents in accordance with the Incident Response Plan.

§ Assist with containment, remediation, recovery, and documentation of cybersecurity incidents.

§ Conduct vulnerability scans and analyze findings based on severity, exploitability, and organizational risk.

§ Coordinate remediation of vulnerabilities, security weaknesses, and configuration issues within established timelines.

§ Track vulnerability remediation efforts and prepare reports on outstanding risks and remediation progress.

§ Monitor endpoint security and investigate potentially compromised workstations, servers, and user accounts.

§ Review identity and access alerts, including suspicious authentication activity, privilege changes, and account anomalies.

§ Support phishing investigations and cybersecurity awareness initiatives.

§ Assist with administration and monitoring of EDR, vulnerability management, firewalls, email security, identity protection, and security monitoring platforms.

§ Assist with security assessments, penetration testing activities, and remediation of identified findings.

§ Support cybersecurity due diligence and security reviews of third-party vendors and technology solutions.

§ Maintain documentation related to incidents, investigations, vulnerabilities, procedures, and security controls.

§ Assist with internal and external audits, regulatory examinations, risk assessments, and cybersecurity assessments.

§ Monitor threat intelligence and evaluate emerging threats that may impact the Credit Union.

§ Assist with security metrics, dashboards, and reports for Information Security management.

§ Support cybersecurity policies, standards, procedures, and technical security controls.

§ Participate in tabletop exercises, incident response testing, and business continuity/disaster recovery exercises.

§ Stay informed of emerging threats, vulnerabilities, attack techniques, privacy laws, regulations, and security technologies.

§ BSA Compliance - every employee is required to uphold the Credit Union's compliance with the Bank Secrecy Act and anti-money laundering policies and procedures.

§ Complete required BSA and OFAC training at least annually and comply with all TFCU policies and procedures.

§ Perform other duties as required with or without accommodation.

Requirements

Qualifications: The individual must be able to perform each essential duty satisfactorily. The requirements below are representative of the knowledge, skills, and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and/or Experience

§ Bachelor's degree in Cyber

security, Information Technology, Computer Science, Information Systems, or a related field, or equivalent professional experience.

§ 5 years of experience in cybersecurity, information security, IT security, network security, or a related technical role.

§ Working knowledge of vulnerability management, endpoint security, network security, identity and access management, incident response, and threat detection.

§ Familiarity with Windows environments, Microsoft 365, Active Directory/Entra ID, Purview, networking concepts, and endpoint security technologies.

§ Understanding of phishing, ransomware, malware, credential theft, social engineering, and account compromise.

§ Ability to analyze security alerts and determine appropriate escalation and remediation actions.

§ Information Security certifications such as Security+, CySA+, SSCP, GSEC, CEH, or similar are preferred.

§ Experience in a financial institution, credit union, bank, or other regulated environment is preferred.

Knowledge, Skills and Abilities

§ Ability to meet deadlines in an organized and timely fashion.

§ Ability to handle challenging situations under pressure with professionalism and courtesy.

§ Ability to work independently with appropriate supervision and escalation.

§ Strong verbal and written communication skills, including the ability to express technical concepts in business terms.

§ Strong teamwork, collaboration, analytical, troubleshooting, and interpersonal skills.

§ Ability to handle sensitive and confidential information appropriately.

Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand, walk, sit and use hands to handle or touch. The employee is occasionally required to reach with hands and arms. The employee must occasionally lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, and ability to focus. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.