Hybrid InfoSec Analyst II: Threat Detection & Response

Federal-Home-Loan-Bank-of-Des-Moines-1; Des Moines (IA); Hybrid; USD 81,000 - 97,000; Full time

Job summary

FHLB Des Moines is seeking an Information Security Analyst II to monitor, analyze, and respond to cybersecurity events as part of the security operations team.

The role involves threat detection, incident investigation, vulnerability management, and security administration to protect systems and data. You will coordinate with IT teams, participate in containment and recovery, and help develop response playbooks while staying current on threats and best practices.

Qualifications

• Experience evaluating security alerts and responding to incidents.

Responsibilities

• Monitor security alerts and events from SIEM, EDR, email security, cloud security, identity, network, and other security technologies.
• Analyze security events to determine validity, impact, severity, and response.
• Investigate suspicious activity and perform triage of security incidents, including containment and remediation, coordinating with internal technology teams.
• Escalate confirmed incidents according to incident response procedures.
• Participate in containment, eradication, recovery, and post-incident reviews.
• Document investigations, findings, evidence, and remediation activities.
• Perform threat hunting to identify malicious or abnormal behavior.
• Correlate events across multiple security platforms to identify emerging threats.
• Review indicators of compromise (IOCs) and indicators of attack (IOAs).
• Monitor threat intelligence sources and recommend defensive improvements.
• Identify trends in alerts and recommend tuning to reduce false positives.
• Assist with vulnerability management including reviewing scans, validating findings, and tracking remediation.
• Maintain runbooks and standard operating procedures; test security controls and validate operational readiness.
• Partner with Infrastructure, Cloud, Networking, Application Development, Risk Management, and IT Operations to resolve security issues.
• Provide recommendations to improve detection capabilities and operational processes; assist in developing incident response playbooks.
• Participate in security projects and implementation efforts.
• Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry best practices.
• Participate in incident response tabletop exercises to validate response procedures, identify gaps, and improve preparedness.
• Participate in an on-call incident response rotation to provide after-hours support for incidents and critical security events.
• Support post-incident reviews by documenting lessons learned and recommending improvements to security controls, processes, and response procedures.
• Perform initial forensic data collection to support investigations.
• Support internal and external audits by providing evidence related to security operations.
• Assist with onboarding new security tools and capabilities and perform routine administration of existing tools.

Skills

SIEM

EDR/XDR

IDS/IPS

Email Security

Network Monitoring

Active Directory

Azure AD

Windows OS

Linux OS

Threat Modeling

Incident Response

MITRE ATT&CK

Education

Bachelor's degree in Cybersecurity/CS/IS

Tools

SOAR

Threat Intelligence Platforms

Cloud Security

Digital Forensics

Job description

FHLB Des Moines is seeking an Information Security Analyst II to monitor, analyze, and respond to cybersecurity events as part of the security operations team.

The role involves threat detection, incident investigation, vulnerability management, and security administration to protect systems and data. You will coordinate with IT teams, participate in containment and recovery, and help develop response playbooks while staying current on threats and best practices.