Security Operations & Incident Response Analyst

Community First Credit Union; Neenah (WI); Hybrid; USD 90.000 - 120.000; Vollzeit

Zusammenfassung

Community First Credit Union is seeking an Information Security Analyst to independently administer security technologies, investigate events, and own recurring security processes that protect member data, employee systems, business operations, and member-facing services.

This hands-on role requires configuring controls, investigating alerts, improving repeatable processes, and ensuring security work is documented and measurable.

Qualifikationen

• Bachelor's degree in cybersecurity, information technology, computer science, or related field, or equivalent combination of education and technical experience.
• 2+ years of security administration, systems administration, network administration, or comparable hands-on technical experience.
• Demonstrated ability to configure and maintain enterprise security tooling, not only monitor it.
• Solid working knowledge of network infrastructure, including ports, protocols, routing, switching, segmentation, and traffic flow.
• Working knowledge of enterprise operating system administration across Windows and Linux.
• Practical experience with several of the following: centralized logging or SIEM, endpoint detection and response, firewall administration, intrusion detection and prevention, vulnerability management, email security, cloud security controls, and identity and access management.
• Ability to investigate a security event to a defensible conclusion and explain the reasoning to a non-specialist.
• Ability to develop and document repeatable processes and procedures that others can execute.
• Ability to participate in the department's approved after-hours maintenance or incident-response process.

Aufgaben

• Configure, maintain, monitor, and troubleshoot assigned security platforms across endpoint protection and EDR, identity and access management, email and web security, vulnerability management, firewalls, IDS/IPS, SIEM and centralized logging, cloud, data protection, and related controls.
• Independently investigate routine alerts using endpoint, identity, network, email, cloud, and SIEM data, documenting the reasoning behind disposition and escalation decisions rather than only the outcome.
• Operate vulnerability-management workflows from scan coverage and finding validation through ownership, due dates, exception routing, and verified closure.
• Tune detection rules, dashboards, alert thresholds, and operational queries to reduce noise while validating that true-positive coverage is retained.
• Support containment, evidence gathering, recovery, communication, after-action review, and control-improvement work during incidents.
• Plan and implement approved routine security changes, participate in review of higher-risk changes, and contribute security requirements and testing to technology projects.
• Create and maintain runbooks, standards, diagrams, queries, dashboards, troubleshooting notes, and documentation that another team member can execute unaided.
• Use PowerShell, Python, platform workflows, APIs, or similar methods to reduce manual effort, improve accuracy, and strengthen traceability with appropriate review and secure credential handling.
• Support audits, regulatory examinations, access reviews, risk assessments, control testing, remediation validation, business continuity, disaster recovery, and tabletop exercises.
• Help onboard and coach Information Security Specialists and communicate security requirements, impact, risk, and resolution clearly to technical and non-technical audiences.

Kenntnisse

Security administration

Systems administration

Network administration

Endpoint security

PowerShell

Python

Cloud security

SIEM

Incident response

Documentation

Ausbildung

Bachelor's degree in cybersecurity or related field

Equivalent experience

Tools

SIEM

EDR

Firewall administration

Cloud platforms (Azure/AWS/Google)

Vulnerability management tools

Jobbeschreibung

Community First Credit Union is seeking an Information Security Analyst to independently administer security technologies, investigate events, and own recurring security processes that protect member data, employee systems, business operations, and member-facing services.

This hands-on role requires configuring controls, investigating alerts, improving repeatable processes, and ensuring security work is documented and measurable.