Cybersecurity Operations Analyst: Threat Hunting & IR (Hybrid)

First Tech Federal Credit Union; Rocklin (CA); Hybride; USD 91 000 - 109 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision

401(k) match

Paid time off

Paid holidays

Employee pricing on lending

Résumé du poste

First Tech Federal Credit Union is seeking a Cybersecurity Analyst to monitor, analyze, and respond to cybersecurity events enterprise-wide. The role supports incident response, threat hunting, and continuous improvement of security tools and processes.

You will work with infrastructure, cloud, identity, and risk teams to coordinate remediation and ensure operational readiness, with hybrid schedule and potential after-hours on-call support.

Qualifications

• 2+ years of relevant experience in security operations and incident response.
• Experience with MITRE ATT&CK and NIST CSF is preferred.
• Ability to analyze logs and correlate events across data sources.

Responsabilités

• Monitor and triage security alerts from multiple tech domains and validate impact.
• Investigate phishing, malware, compromised credentials, and anomalous activity.
• Contain threats and document timelines during incidents; escalate when needed.
• Lead threat hunts and validate detections against emerging threats.
• Tune detections and alert workflows to improve fidelity and reduce noise.
• Maintain case records, dashboards, and runbooks for audits and handoffs.
• Collaborate with IT, cloud, identity, and risk teams to coordinate remediation.

Connaissances

SIEM operations

Incident response

Threat hunting

Evidence handling

Cross-team collaboration

Documentation

Analytical thinking

Communication

Formation

Bachelor's degree or 4+ years experience

Outils

CrowdStrike Next-Gen

EDR tools

Identity security tools

Threat intelligence tools

Description du poste

First Tech Federal Credit Union is seeking a Cybersecurity Analyst to monitor, analyze, and respond to cybersecurity events enterprise-wide. The role supports incident response, threat hunting, and continuous improvement of security tools and processes.

You will work with infrastructure, cloud, identity, and risk teams to coordinate remediation and ensure operational readiness, with hybrid schedule and potential after-hours on-call support.