Cybersecurity Analyst

Heritage-Federal-Credit-Union; City of Newburgh (NY); On-site; USD 75,000 - 110,000; Full time

Job summary

Heritage Federal Credit Union is expanding its cybersecurity team. The Cybersecurity Analyst will assist in information security, incident response, access reviews, business continuity, and vendor management to ensure regulatory compliance across multiple jurisdictions.

You will conduct complex investigations, analyze and report cybersecurity metrics, and support risk assessments and awareness programs. The role reports to the SVP Enterprise Risk Management & Information Security Officer and

Qualifications

• Associate degree in cybersecurity or similar area with two years of relevant work experience.
• Experience in Security and Risk Management and related domains.
• Strong documentation and communication skills.
• Foundational knowledge of networking, operating systems, and security concepts.
• Intermediate knowledge of FFIEC, GLBA, and NIST CSF requirements.
• Exposure to cloud security monitoring and applications/software.
• Prior experience in regulated financial services environment.

Responsibilities

• Independently investigate alerts and security incidents, perform root cause analysis, and recommend corrective actions to SVPERMISO.
• Support containment and recovery activities during security incidents.
• Tune SIEM and endpoint detection tools to improve effectiveness and reduce false positives.
• Support risk assessments, controls testing, and regulatory exams; Maintain logs and documentation for audits and NCUA exams.
• Assist in security audits and risk assessments to identify weaknesses and recommend fixes; review vulnerability reports and prioritize remediation in collaboration with IT and business stakeholders.
• Monitor threat intelligence and assess relevance to the credit union’s environment; Research new threats, vulnerabilities, and mitigation techniques to stay proactive.
• Assist in the production of incident reports, management metrics, and executive summaries for management and regulators.
• Participate in tabletop exercises and incident response testing.
• Monitor security tools (i.e. SIEM, IDS/IPS, EDR) and perform initial alert triage following documented procedures.
• Escalate potential incidents and suspicious activity with clear documentation and timelines to SVPERMISO.
• Assist with incident response activities, including evidence gathering and post-incident reporting.
• Assist in the development and implementation of security awareness and required compliance training.
• Review user access rights and permissions based on least privilege.
• Support the credit union in adherence to financial regulations and internal policies related to information security and cybersecurity.
• Participate in disaster recovery and business continuity planning.
• Maintain awareness of how security systems affect the credit union’s security posture, exposure, and production environment.
• Maintain security related data flow diagrams for the credit union.

Skills

Security Mgmt

Security Architecture

Network Security

Identity & Access Mgmt

Security Operations

Log Analysis

Communication

Attention to detail

Education

Associate degree in cybersecurity

Tools

SIEM

EDR

Log Analysis

Job description

Description

Heritage Federal Credit Union, a Readers' Choice Best Credit Union gold award recipient, is growing thanks to the focus on helping our members and community. At Heritage, we foster a dynamic and collaborative environment where your contributions truly make a difference. As we continue to expand, we are searching for a Cybersecurity Analyst to join our amazing team!

The Cybersecurity Analyst, under the direction of the SVP Enterprise Risk Management & Information Security Officer (SVPERMISO), assists in all aspects of, and in various assignments supporting the information security, incident response, user access review, business continuity, and vendor management programs to ensure compliance with federal and state regulations specifically for information security and cybersecurity. This is a role that involves independently conducting complex investigations; analyzing, collecting, monitoring, reporting cybersecurity metrics, alerts, logs, reports, surveillance controls in alignment with regulatory and credit union expectations. Additional responsibilities include assisting in risk assessments, delivery and development of awareness training, and development and enforcement of security policies, compliance measures, and IT security data flow diagrams.

What you’ll do:

• Independently investigate alerts and security incidents, perform root cause analysis, and recommend corrective actions to SVPERMISO.
• Support containment and recovery activities during security incidents.
• Tune SIEM and endpoint detection tools to improve effectiveness and reduce false positives.
• Support risk assessments, controls testing, and regulatory exams; Maintain logs and documentation for audits and NCUA exams.
• Assist in security audits and risk assessments to identify weaknesses and recommend fixes; review vulnerability reports and prioritize remediation in collaboration with IT and business stakeholders.
• Monitor threat intelligence and assess relevance to the credit union’s environment; Research new threats, vulnerabilities, and mitigation techniques to stay proactive.
• Assist in the production of incident reports, management metrics, and executive summaries for management and regulators.
• Participate in tabletop exercises and incident response testing.
• Monitor security tools (i.e. SIEM, IDS/IPS, EDR) and perform initial alert triage following documented procedures.
• Escalate potential incidents and suspicious activity with clear documentation and timelines to SVPERMISO.
• Assist with incident response activities, including evidence gathering and post-incident reporting.
• Assist in the development and implementation of security awareness and required compliance training.
• Review user access rights and permissions based on least privilege.
• Support the credit union in adherence to financial regulations and internal policies related to information security and cybersecurity.
• Participate in disaster recovery and business continuity planning.
• Maintain awareness of how security systems affect the credit union’s security posture, exposure, and production environment.
• Maintain security related data flow diagrams for the credit union.

Qualifications/Experience Required:

• Associate degree in cybersecurity or similar area with two years of relevant work experience in related field or at least four years of direct relevant experience
• Relevant work experience should come from at least two of the following domains: Security and Risk Management, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, or Security Operations
• Intermediate experience with SIEM, endpoint security, and log analysis.
• Foundational knowledge of networking, operating systems, and security concepts.
• Intermediate knowledge of FFIEC, GLBA, and NIST CSF requirements.
• Strong documentation and communication skills
• Exposure to cloud security monitoring and applications/software
• Prior experience working in a regulated financial services environment
• Strong analytical, problem solving, and critical thinking skills
• Attention to detail
• Ability to maintain confidentiality

About Heritage Federal Credit Union

Heritage Federal Credit Union is a full-service financial institution with over $1 billion in assets and serves more than 65,000+ members in Gibson, Posey, Warrick, Vanderburgh, Daviess, Knox, Spencer, Pike, Perry, Crawford, Clark, Floyd, or Harrison Counties in Indiana; or Henderson, Daviess, Hopkins, Hancock, Ohio, McLean, Webster, Union, or Crittenden Counties in Kentucky; or Lawrence, Wabash, White, Gallatin or Hardin Counties in Illinois. As a nonprofit, credit unions provide low-cost financial services to their members and are mission driven. Founded in 1965, Heritage Federal is committed to improving daily lives of those we live and work with, providing members the best financial products and services, and giving back to the local communities through donations, sponsorships, and volunteerism. More information regarding Heritage Federal Credit Union can be located at heritagefederal.org.

EOE