Cybersecurity Operations Analyst

Cybersecurity Jobs; Hillsboro (OR); Hybrid; USD 83,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) match

Job summary

First Tech Federal Credit Union in Hillsboro, OR is seeking an intermediate-security operations analyst to monitor, analyze, investigate, and respond to cybersecurity events. The role includes incident-response support, threat-hunting, and documenting investigations across enterprise systems.

You will collaborate with multiple teams to reduce risk, tune detections, and support audits. The position is hybrid with a focus on continuous learning and on-call coverage.

Qualifications

• Bachelor’s degree in a field relevant to the role or 4 additional years of related experience.
• 2+ years of relevant experience.
• Working knowledge of security operations, incident response, threat detection, vulnerability management, and NIST/ATT&CK frameworks.
• Hands-on experience with SIEM (including CrowdStrike Next-Gen), EDR, identity, email security, network security, cloud security, case management, and threat intel tools.

Responsibilities

• Monitor and triage alerts from security technologies across endpoints, identity, email, network, cloud, and SIEM platforms.
• Investigate phishing, malware, compromised credentials, data exposure, and other security events using telemetry and threat intel.
• Follow incident-response procedures to contain threats and escalate high-severity incidents.
• Conduct threat hunts and detection validation based on emerging threats and indicators of compromise.
• Tune detections and alert workflows to improve fidelity and reduce noise.
• Create and maintain case records, dashboards, and runbooks for auditability and continuity.
• Collaborate with infrastructure, network, cloud, identity, application, fraud, risk, and help-desk teams to coordinate remediation.
• Participate in on-call rotations and post-incident reviews.

Skills

Security operations

Incident response

Threat detection

Communication

Documentation

Collaboration

Education

Bachelor’s degree in relevant field

Tools

CrowdStrike Next-Gen

SIEM

EDR

Threat intelligence tools

Case management

Job description

The Cybersecurity Operations Analyst will help protect First Technology Federal Credit Union by monitoring and investigating security events, supporting incident response activities, and improving detection quality across the enterprise.

Role Overview

In this intermediate-level security operations position, you will monitor, analyze, investigate, and respond to cybersecurity events. The role includes incident-response support and threat-hunting, along with documentation and escalation of significant issues. You will collaborate with multiple teams to reduce enterprise risk and address recurring control weaknesses.

Responsibilities

• Monitor and triage alerts from security technologies, including endpoint, identity, email, network, cloud, vulnerability-management, and SIEM platforms, validating severity, scope, and potential business impact.
• Investigate suspected phishing, malware, compromised credentials, unauthorized access, data exposure, anomalous behavior, and other security events using available telemetry, threat intelligence, and documented procedures.
• Follow incident-response procedures by containing threats within approved authority, preserving relevant evidence, documenting investigative timelines, and escalating high-severity or complex incidents to senior analysts and leadership.
• Conduct threat hunts and detection validation activities based on emerging threats, vulnerabilities, indicators of compromise, adversary behaviors, and gaps identified through incidents or control reviews.
• Tune security detections and alert workflows to improve fidelity, reduce unnecessary noise, and document rationale and testing results in alignment with established review and change-management processes.
• Create and maintain case records, dashboards, metrics, reports, runbooks, knowledge articles, and shift handoffs to support auditability, operational continuity, and leadership awareness.
• Collaborate with infrastructure, network, cloud, identity, application, fraud, risk, and help-desk teams to coordinate remediation, validate recovery, and address recurring control weaknesses.
• Participate in an on-call or after-hours response rotation as assigned, support security exercises and post-incident reviews, and contribute through peer mentoring and cross-training.

Requirements

• Bachelor’s degree in a field relevant to the role (or 4 additional years of relevant experience in lieu of a degree).
• 2+ years of relevant experience.
• Working knowledge of security operations, incident response, threat detection, vulnerability management, and common attack techniques, with ability to apply MITRE ATT&CK and the NIST Cybersecurity Framework.
• Hands-on experience with SIEM (including CrowdStrike Next-Gen), endpoint detection and response, identity, email security, network security, cloud security, case management, and threat intelligence tools in an enterprise environment.
• Ability to analyze logs and security telemetry, correlate events across multiple data sources, identify true positives versus benign activity, and communicate evidence-based conclusions.
• Ability to independently manage routine and moderately complex investigations, prioritize concurrent work based on risk and service-level expectations, and recognize when escalation is required.
• Strong written and verbal communication skills, including producing concise technical documentation and explaining risk, impact, findings, and recommended actions to technical and nontechnical audiences.
• Demonstrated judgment, attention to detail, discretion with sensitive information, customer focus, collaboration, and commitment to continuous learning in a rapidly changing threat environment.
• Familiarity with scripting, query languages, or automation for investigation and operational improvement is preferred.
• Relevant industry certifications such as Security+, CySA+, GCIH, GCIA, SC-200, or vendor-specific certifications are preferred and may be considered alongside equivalent practical experience.

Technologies

• MITRE ATT&CK
• NIST Cybersecurity Framework
• SIEM
• CrowdStrike Next-Gen

Location and Schedule

• Hillsboro, OR: 97124 (Hybrid)
• Rocklin, CA: 95765 (Hybrid)
• Schedule: Monday to Friday, full-time (Hybrid)

Compensation

Target compensation in Hillsboro, OR: $83,000 - $99,500 + annual bonus

Target compensation in Rocklin, CA: $91,300 - $109,450 + annual bonus

Salary range (annual): USD 83,000 - 109,450

Benefits

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: accrue up to 15 days in your first year, plus 40 hours of sick time and 3 personal days that refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements

• First Tech is an equal opportunity employer, and values diversity, inclusion, and equity.
• First Tech is not currently offering Visa transfer/sponsorship for this position.

Reasonable Accommodations

If you need a reasonable accommodation for any part of the employment process, send an email to the address provided for accommodation requests. Please note that only inquiries related to reasonable accommodation will be responded to from that email address.