Information Security Analyst

Community First Credit Union | Wisconsin; Neenah (WI); On-site; USD 85,000 - 110,000; Full time

Job summary

Community First Credit Union in Wisconsin seeks an Information Security Analyst to independently administer security technologies, investigate events, and own recurring security processes protecting member data and operations. The role involves configuring controls, reducing noise in detections, and guiding incident response with documented processes.

You will collaborate across teams, develop runbooks, and implement automation using PowerShell and Python.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or related field or equivalent
• 2+ years of security administration, systems administration, network administration, or hands-on technical experience
• Demonstrated ability to configure and maintain enterprise security tooling, not only monitor it.
• Solid working knowledge of network infrastructure, including ports, protocols, routing, switching, segmentation, and traffic flow
• Working knowledge of Windows and Linux administration
• Experience with centralized logging or SIEM, EDR, firewall, IDS/IPS, vulnerability management, email security, cloud security controls, and IAM

Responsibilities

• Configure, maintain, monitor, and troubleshoot security platforms across endpoint protection, EDR, IAM, email/web security, vulnerability management, firewalls, IDS/IPS, SIEM, cloud, and data protection
• Investigate routine alerts using multiple data sources and document reasoning for dispositions
• Manage vulnerability-management workflows from scanning to closure with ownership and due dates
• Tune detection rules, dashboards, and queries to reduce noise while preserving true positives
• Support containment, evidence gathering, recovery, communication, and after-action reviews during incidents
• Plan and implement routine security changes and contribute to security requirements in projects
• Create and maintain runbooks, standards, diagrams, queries, dashboards, and troubleshooting notes
• Use PowerShell, Python, APIs, or similar methods to improve accuracy and traceability
• Support audits, examinations, access reviews, risk assessments, and tabletop exercises
• Onboard and mentor Information Security Specialists and clearly communicate risk and resolution to diverse audiences

Skills

Security administration

Systems administration

Network administration

Windows administration

Linux administration

SIEM

EDR / endpoint security

PowerShell / Python

Documentation / runbooks

Communication to non-technical readers

Education

Bachelor's degree in cybersecurity, IT, CS or related field

Tools

PowerShell

Python

SIEM

EDR

Firewalls

IDS/IPS

Vulnerability management

IAM / identity and access management

Job description

At Community First, we believe the security of our technology and infrastructure is mission critical. As an Information Security Analyst, you will independently administer security technologies, investigate security events, and own recurring security processes that protect member data, employee systems, business operations, and member-facing services.

This is a hands-on security operations role with broad technical responsibility. The Analyst is expected to configure and maintain assigned controls, investigate alerts to a defensible conclusion, improve repeatable processes, and help ensure security work is documented, measurable, and supportable.

As our Information Security Analyst, you will:

• Configure, maintain, monitor, and troubleshoot assigned security platforms across endpoint protection and EDR, identity and access management, email and web security, vulnerability management, firewalls, IDS/IPS, SIEM and centralized logging, cloud, data protection, and related controls.
• Independently investigate routine alerts using endpoint, identity, network, email, cloud, and SIEM data, documenting the reasoning behind disposition and escalation decisions rather than only the outcome.
• Operate vulnerability-management workflows from scan coverage and finding validation through ownership, due dates, exception routing, and verified closure.
• Tune detection rules, dashboards, alert thresholds, and operational queries to reduce noise while validating that true-positive coverage is retained.
• Support containment, evidence gathering, recovery, communication, after-action review, and control-improvement work during incidents.
• Plan and implement approved routine security changes, participate in review of higher-risk changes, and contribute security requirements and testing to technology projects.
• Create and maintain runbooks, standards, diagrams, queries, dashboards, troubleshooting notes, and documentation that another team member can execute unaided.
• Use PowerShell, Python, platform workflows, APIs, or similar methods to reduce manual effort, improve accuracy, and strengthen traceability with appropriate review and secure credential handling.
• Support audits, regulatory examinations, access reviews, risk assessments, control testing, remediation validation, business continuity, disaster recovery, and tabletop exercises.
• Help onboard and coach Information Security Specialists and communicate security requirements, impact, risk, and resolution clearly to technical and non-technical audiences.

An ideal candidate will have a combination of:

• Bachelor's degree in cybersecurity, information technology, computer science, or related field, or equivalent combination of education and technical experience.
• 2+ years of security administration, systems administration, network administration, or comparable hands-on technical experience.
• Demonstrated ability to configure and maintain enterprise security tooling, not only monitor it.
• Solid working knowledge of network infrastructure, including ports, protocols, routing, switching, segmentation, and traffic flow.
• Working knowledge of enterprise operating system administration across Windows and Linux.
• Practical experience with several of the following: centralized logging or SIEM, endpoint detection and response, firewall administration, intrusion detection and prevention, vulnerability management, email security, cloud security controls, and identity and access management.
• Ability to investigate a security event to a defensible conclusion and explain the reasoning to a non-specialist.
• Ability to develop and document repeatable processes and procedures that others can execute.
• Ability to participate in the department's approved after-hours maintenance or incident-response process.

Preferred experience and credentials include:

• CompTIA CySA+ or Security+, ISC2 SSCP, Security Blue Team BTL1, GIAC GSEC, Microsoft, cloud, or comparable documented professional development.
• Scripting or automation experience in PowerShell, Python, APIs, platform workflows, or a comparable method.
• Experience with cloud platform security controls in Microsoft Azure, Microsoft 365, AWS, Google Cloud, or another major cloud provider.
• Experience supporting audits, regulatory examinations, access reviews, control testing, or evidence collection.
• Regulated financial services experience with exposure to NCUA 12 CFR Part 748, FFIEC examination guidance, GLBA-related safeguards, payment-card requirements, or similar control expectations.

Certifications are valued as evidence of learning and professional development. They are not a substitute for demonstrated technical capability, sound judgment, and practical experience. Community First supports employees at all stages of their careers in deepening their professional skills and pursuing certifications, credentials, and ongoing education.