Senior Cybersecurity Incident Response Lead

Mountain America Credit Union; United States; Hybrid; USD 120,000 - 180,000; Full time

Job description

Job Summary

The Senior CyberSecurity Incident Response Analyst is responsible for leading the enterprise-wide incident identification and resolution program. This role involves designing and implementing new incident management solutions, ensuring adherence to the corporate incident response plan, and providing high-quality service in line with the organization's standards.

Job Description

LOCATION; UTAH MOUNTAIN AMERICA CENTER 9800 S MONROE STREET, SANDY UT 84070

SCHEDULE: FULL-TIME HYBRID IN UTAH

To be effective, an individual must be able to perform each job duty successfully.

• Lead an enterprise-wide incident identification and resolution program within the business environment.
• Lead and manage incident management activities with a high level of quality service and MACUWay.
• Efficiently document and review complex security incident reports.
• Create and maintain dashboards and periodic reports to document historical threats, suspicious/anomalous activity, malware, etc.
• Develop and execute processes to restore normal service operation as quickly and securely as possible in the event of an incident to ensure Service Level Agreements are met.
• Lead post-mortem processes and reviews; test fixes to ensure lessons learned have been adequately resolved.
• Establish and follow guidelines for log reviews and security community threat intelligence.
• Lead and participate in incident response training sessions.
• Correlate and analyze data from intrusion detection and prevention systems with data from other sources such as firewall, web server, and DNS logs.
• Assist in \"hunt missions\" using threat intelligence, analysis of anomalous log data and scripts, and results of brainstorming sessions to detect and eradicate threat actors.
• Respond and investigate alerts for IDS/IPS/NextGen firewall, next-generation malware protection, web proxies, DLP tools, and email spam filtering.
• Assist in forensics and packet-level analysis on servers, endpoints, and appliances.
• Maintain and validate the chain of custody for all evidence collected during incidents and security investigations.
• Design and execute internal phishing simulations.
• Assist in analyzing phishing emails/calls/texts to team members and members.
• Conduct and oversee employee security training.
• Monitor, detect, analyze, and respond to cyber threats and incidents.
• Correlate and analyze events and data to determine the scope of cyber incidents.
• Acquire and analyze endpoint and network artifacts, volatile memory, malicious files/binaries, and scripts.
• Document investigation and incident response actions in Archer and prepare formal incident reports.
• Develop, document, and maintain incident response processes, procedures, workflows, and playbooks.
• Tune and maintain security tools (e.g., EDR, IDS, SIEM) to reduce false positives and improve SOC detection capabilities
• Perform other duties as assigned.

KNOWLEDGE, SKILLS, and ABILITIES

The requirements listed are representative of the knowledge, skills, and/or abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

• Experience 4 years of directly related experience.
• Extensive experience in incident response, cybersecurity, and threat analysis.
• Strong knowledge of security platforms and tools (e.g., SIEM, EDR, IDS, DLP).
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and as part of a team.
• Strong understanding of cybersecurity regulatory requirements and best practices.

Education

Four-year college degree or equivalent experience.

Relevant certifications

Security +, Project +, Web Security Associate, GCFE, or equivalent.

Licenses, Certifications, Registrations

N/A

Managerial Responsibility

No Managerial Responsibility. However, this position is a senior position and will require mentoring and working with others on the team.

Computer/Office Equipment Skills

Demonstrated proficient skills with Microsoft Office Suite including Outlook, Word, PowerPoint, and Excel.

SIEM EDR DLP Language Skills

Demonstrated ability to clearly communicate verbally and in writing. Demonstrated ability to read and follow instructions.

Other Skills and Abilities

Demonstrated excellent customer service skills. Proactively solves problems and actively improves processes and create efficiencies. Professional, exercises personal discretion and independent judgement. Adaptive to change, responds positively to altered circumstances or conditions. Excellent inter-personal skills, including the ability to lead and collaborate with multiple teams. Possess a desire and willingness to learn and continually update knowledge of financial concepts, strategies, systems etc.

PHYSICAL ABILITIES / WORKING CONDITIONS

Physical Demands: Ability to sit, talk and hear consistently Ability to stand, walk, and use hands to handle or reach occasionally Vision Requirements Close vision (clear vision at 20 inches or less) Distance vision (clear vision at 20 feet or more) Weight Lifted or Force Exerted Ability to lift up to 25 pounds occasionally may need to lift up to 50 pounds.

Environmental

There are no unusual environmental factors (such as a typical office) Noise Environment Moderate noise (business office with computers and printers, light traffic)

Company Overview

Mountain America Credit Union is one of the foremost financial institutions in the country, with more than 95 branches located in 5 states (Utah, Idaho, Nevada, Montana, and Arizona). We believe that a healthy balance between work, home life, and play is essential to our team members and our success. We offer a friendly, comfortable and inclusive work environment, fun employee activities and exciting charity events to ensure that no day is dull at Mountain America. Our purpose is to help members enjoy a good life by providing them a positive incentive to save and manage their finances. We also give members easy access to their accounts and allow them to control their funds in a variety of ways, including ATMs, online home banking, mobile banking, direct deposit, automatic payment options and access through a large branch network. When making decisions, we always put members' needs first. It's just the way we do business and a part of the \"people helping people\" philosophy of credit unions.