Cybersecurity Operations Analyst

First Tech Federal Credit Union; Hillsboro (OR); Hybrid; USD 83,000 - 100,000; Full time

Benefits offered by this job

Health coverage

Dental coverage

Vision coverage

401(k) match

Paid time off

Paid holidays

Employee pricing on lending products

Job summary

First Tech Federal Credit Union in Hillsboro, OR is seeking a Cybersecurity Analyst to monitor, analyze, investigate, and respond to cybersecurity events across the enterprise. The role supports incident response and threat-hunting, improves detection quality, and partners with technology and business teams to reduce risk.

Collaborate with infrastructure, network, cloud, identity, and fraud teams; participate in on-call rotations and post-incident reviews; communicate risk effectively to

Qualifications

• Bachelor's degree or 4+ years of relevant experience in lieu of a degree.
• 2+ years of relevant experience in security operations and incident response.
• Knowledge of MITRE ATT&CK and NIST CSF frameworks.
• Experience with SIEM and security telemetry in an enterprise environment.

Responsibilities

• Monitor and triage alerts from security technologies across endpoints, identity, email, network, cloud, and SIEM platforms.
• Investigate phishing, malware, compromised credentials, data exposure, and anomalous activity using telemetry and threat intelligence.
• Execute incident-response procedures, contain threats, preserve evidence, and escalate high-severity incidents.
• Develop threat hunts and detection validation based on emerging threats and IOC indicators.
• Tune detections and alert workflows to reduce noise and document testing results.
• Create and maintain case records, dashboards, reports, runbooks, and handoffs for auditability.
• Collaborate with infrastructure, network, cloud, identity, app, risk, and help-desk teams on remediation and recovery.
• Participate in on-call rotations, security exercises, and post-incident reviews; mentor peers.

Skills

Security operations

Incident response

Threat detection

Vulnerability management

MITRE ATT&CK

NIST CSF

Strong communication

Scripting/automation

Threat intelligence

Education

Bachelor's degree or equivalent experience

Tools

CrowdStrike Next-Gen

EDR

Identity security tools

Email security tools

Network security tools

Cloud security tools

Case management tools

Threat intelligence tools

Job description

Description

The Cybersecurity Analyst position is responsible for monitoring, analyzing, investigating, and responding to cybersecurity events across the enterprise. The role performs intermediate-level security operations, supports incident response and threat-hunting activities, improves detection quality, and partners with technology and business teams to reduce risk. The analyst independently handles routine and moderately complex investigations, documents findings, escalates significant issues, and contributes to the continuous improvement of security tools, processes, and operational readiness.

What You'll Do:

• Monitor and triage alerts from security technologies, including endpoint, identity, email, network, cloud, vulnerability-management, and SIEM platforms; validate severity, scope, and potential business impact.
• Investigate suspected phishing, malware, compromised credentials, unauthorized access, data exposure, anomalous behavior, and other security events using available telemetry, threat intelligence, and documented procedures.
• Execute incident-response procedures by containing threats within approved authority, preserving relevant evidence, documenting investigative timelines, and escalating high-severity or complex incidents to senior analysts and leadership.
• Develop and perform threat hunts and detection validation activities based on emerging threats, vulnerabilities, indicators of compromise, adversary behaviors, and gaps identified through incidents or control reviews.
• Tune security detections and alert workflows to improve fidelity, reduce unnecessary noise, document rationale and testing results, and ensure changes follow established review and change-management processes.
• Create and maintain clear case records, dashboards, metrics, reports, runbooks, knowledge articles, and shift handoffs that support auditability, operational continuity, and leadership awareness.
• Collaborate with infrastructure, network, cloud, identity, application, fraud, risk, and help-desk teams to coordinate remediation, validate recovery, and address recurring control weaknesses.
• Participate in an on-call or after-hours response rotation as assigned, support security exercises and post-incident reviews, and share knowledge through peer mentoring and cross-training.

Essential Skills:

• Required Education:Bachelors degree in field relevant to role (or 4 additional years of relevant experience in lieu of a degree)
• Required Experience:2+ years of relevant experience
• Working knowledge of security operations, incident response, threat detection, vulnerability management, and common attack techniques, with the ability to apply established frameworks such as MITRE ATT&CK and the NIST Cybersecurity Framework.
• Hands-on experience using SIEM, such as CrowdStrike Next-Gen, endpoint detection and response, identity, email security, network security, cloud security, case management, and threat intelligence tools in an enterprise environment.
• Ability to analyze logs and security telemetry, correlate events across multiple data sources, distinguish true positives from benign activity, and communicate evidence-based conclusions.
• Ability to manage routine and moderately complex investigations independently, prioritize concurrent work based on risk and service-level expectations, and recognize when escalation is required.
• Strong written and verbal communication skills, including the ability to produce concise technical documentation and explain risk, impact, findings, and recommended actions to technical and nontechnical audiences.
• Demonstrated judgment, attention to detail, discretion with sensitive information, customer focus, collaboration, and commitment to continuous learning in a rapidly changing threat environment.
• Familiarity with scripting, query languages, or automation used for investigation and operational improvement is preferred.
• Relevant industry certifications, such as Security+, CySA+, GCIH, GCIA, SC-200, or vendor-specific certifications, are preferred and may be considered alongside equivalent practical experience.

Location:

Hillsboro, OR 97124 | Rocklin, CA 95765

Target Compensation in Hillsboro, OR:

$83,000 - $99,500 + annual bonus

Target Compensation in Rocklin, CA:

$91,300 - $109,450 + annual bonus

Schedule:

Monday - Friday | Full-Time (Hybrid)

Who We Are:

Every great journey begins with a bold idea-and ours is no different. First Tech and DCU were founded on the belief that financial solutions should put people first. That belief has fueled decades of innovation and service, rooted in the tech sector and expanding to support members from all walks of life.

Employees are eligible for:

• Traditional medical, dental, and vision coverage
• Generous 401(k) match
• Paid Time Off: You'll accrue up to 15 days in your first year. In addition, you'll receive 40 hours of sick time and 3 personal days, which refresh annually
• Paid federal holidays
• Special employee pricing on lending products such as mortgage, auto, and personal loans (eligibility subject to standard account requirements and underwriting criteria)

Employment Statements:

First Tech is an equal opportunity employer, and we value diversity, inclusion, and equity at our company. We evaluate qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

Reasonable Accommodation Request:

If you're applying for a job and need a reasonable accommodation for any part of the employment process, please send an email to [e-mail] and let us know the nature of your request and contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this email address.

Visa Sponsorship:

First Tech is not currently offering Visa transfer/sponsorship for this position.