Cybersecurity Analyst

Heritage Federal Credit Union, LLC; Indiana (PA); On-site; USD 70,000 - 110,000; Full time

Job summary

Heritage Federal Credit Union is seeking a Cybersecurity Analyst to support information security, incident response, access reviews, and vendor management. The role reports to the SVP Enterprise Risk Management & Information Security Officer and involves audits, risk assessments, awareness training, and policy enforcement.

Ideal candidates have an associate degree in cybersecurity or related field and 2+ years of experience, with strong SIEM, endpoint security, and log analysis skills.

Qualifications

• Associate degree in cybersecurity or related field with 2+ years of relevant experience.
• Experience in at least two domains among Security and Risk Management, Security Architecture/Engineering, Communication and Network Security, IAM, Security Assessment/Testing, or Security Operations.
• Intermediate experience with SIEM, endpoint security, and log analysis.
• Foundational knowledge of networking, operating systems, and security concepts.
• Intermediate knowledge of FFIEC, GLBA, and NIST CSF requirements.
• Strong documentation and communication skills
• Exposure to cloud security monitoring and applications/software
• Prior experience in a regulated financial services environment
• Strong analytical, problem solving, and critical thinking skills
• Attention to detail and ability to maintain confidentiality

Responsibilities

• Independently investigate alerts and security incidents, perform root cause analysis, and recommend corrective actions.
• Support containment and recovery activities during security incidents.
• Tune SIEM and endpoint detection tools to improve effectiveness and reduce false positives.
• Assist in risk assessments, controls testing, and regulatory exams; maintain logs and documentation for audits.
• Review vulnerability reports and prioritize remediation with IT and business stakeholders.
• Monitor threat intelligence and assess relevance to the credit union’s environment.
• Assist in the production of incident reports, management metrics, and executive summaries for regulators.
• Participate in tabletop exercises and incident response testing.
• Review user access rights and permissions based on least privilege; support access reviews.
• Support disaster recovery and business continuity planning.

Skills

Documentation & communication

Analytical thinking

Problem solving

Attention to detail

Regulatory environment awareness

Cloud security monitoring exposure

Education

Associate degree in cybersecurity or related field

Tools

SIEM

Endpoint security

Log analysis

Job description

Description

Heritage Federal Credit Union, a Readers' Choice Best Credit Union gold award recipient, is growing thanks to the focus on helping our members and community. At Heritage, we foster a dynamic and collaborative environment where your contributions truly make a difference. As we continue to expand, we are searching for a Cybersecurity Analyst to join our amazing team!

The Cybersecurity Analyst, under the direction of the SVP Enterprise Risk Management & Information Security Officer (SVPERMISO), assists in all aspects of, and in various assignments supporting the information security, incident response, user access review, business continuity, and vendor management programs to ensure compliance with federal and state regulations specifically for information security and cybersecurity. This is a role that involves independently conducting complex investigations; analyzing, collecting, monitoring, reporting cybersecurity metrics, alerts, logs, reports, surveillance controls in alignment with regulatory and credit union expectations. Additional responsibilities include assisting in risk assessments, delivery and development of awareness training, and development and enforcement of security policies, compliance measures, and IT security data flow diagrams.

What you’ll do:

• Independently investigate alerts and security incidents, perform root cause analysis, and recommend corrective actions to SVPERMISO.
• Support containment and recovery activities during security incidents.
• Tune SIEM and endpoint detection tools to improve effectiveness and reduce false positives.
• Support risk assessments, controls testing, and regulatory exams; Maintain logs and documentation for audits and NCUA exams.
• Assist in security audits and risk assessments to identify weaknesses and recommend fixes; review vulnerability reports and prioritize remediation in collaboration with IT and business stakeholders.
• Monitor threat intelligence and assess relevance to the credit union’s environment; Research new threats, vulnerabilities, and mitigation techniques to stay proactive.
• Assist in the production of incident reports, management metrics, and executive summaries for management and regulators.
• Participate in tabletop exercises and incident response testing.
• Monitor security tools (i.e. SIEM, IDS/IPS, EDR) and perform initial alert triage following documented procedures.
• Escalate potential incidents and suspicious activity with clear documentation and timelines to SVPERMISO.
• Assist with incident response activities, including evidence gathering and post-incident reporting.
• Assist in the development and implementation of security awareness and required compliance training.
• Review user access rights and permissions based on least privilege.
• Support the credit union in adherence to financial regulations and internal policies related to information security and cybersecurity.
• Participate in disaster recovery and business continuity planning.
• Maintain awareness of how security systems affect the credit union’s security posture, exposure, and production environment.
• Maintain security related data flow diagrams for the credit union.

Qualifications/Experience Required:

• Associate degree in cybersecurity or similar area with two years of relevant work experience in related field or at least four years of direct relevant experience
• Relevant work experience should come from at least two of the following domains: Security and Risk Management, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, or Security Operations
• Intermediate experience with SIEM, endpoint security, and log analysis.
• Foundational knowledge of networking, operating systems, and security concepts.
• Intermediate knowledge of FFIEC, GLBA, and NIST CSF requirements.
• Strong documentation and communication skills
• Exposure to cloud security monitoring and applications/software
• Prior experience working in a regulated financial services environment
• Strong analytical, problem solving, and critical thinking skills
• Attention to detailAbility to maintain confidentiality

About Heritage Federal Credit Union

Heritage Federal Credit Union is a full-service financial institution with over $1 billion in assets and serves more than 65,000+ members in Gibson, Posey, Warrick, Vanderburgh, Daviess, Knox, Spencer, Pike, Perry, Crawford, Clark, Floyd, or Harrison Counties in Indiana; or Henderson, Daviess, Hopkins, Hancock, Ohio, McLean, Webster, Union, or Crittenden Counties in Kentucky; or Lawrence, Wabash, White, Gallatin or Hardin Counties in Illinois. As a nonprofit, credit unions provide low-cost financial services to their members and are mission driven. Founded in 1965, Heritage Federal is committed to improving daily lives of those we live and work with, providing members the best financial products and services, and giving back to the local communities through donations, sponsorships, and volunteerism. More information regarding Heritage Federal Credit Union can be located at heritagefederal.org.

EOE