Cloud Cybersecurity Engineer

FUNCTIONAL SUMMARY: Under the direction of the Vice President of Information Security, the Cybersecurity Analyst will be responsible for analyzing and monitoring computer networks and systems for security vulnerabilities and breaches. The Analyst is expected to use a range of tools and techniques to identify, assess, and prioritize security risks and provide recommendations for mitigation and remediation. Works closely with members of the Information Security, Risk, and Information Technology teams to ensure the overall security of the Credit Union.Responsibilities• Monitor computer networks and systems for security breaches, incidents, and vulnerabilities.• Identify and prioritize security risks, vulnerabilities, and threats and develop plans to mitigate them.• Develop and implement security procedures and controls to ensure compliance with industry standards and regulations.• Provide Information Security reports and results for management and stakeholders as well as clearly communicating findings as required.• Conduct security audits and assessments of network infrastructure, applications, and systems.• Work with members of the Information Technology team to implement and maintain security technologies, such as firewalls, intrusion detection system, and security information and event management (SIEM) tools.• Stay up to date with the latest security threats, technologies, and trends to provide recommendations for continuous improvement.• Familiar with IAM and PAM solutions.• Assist in physical security activities as required.• Participate in incident response and disaster recovery activities.• Assist the Information Security and Training teams with the development and delivery training programs for employees to increase security awareness and promote best practices.• Investigate and analyze potential security breaches to determine the root cause and impact on the organization.Qualifications• Bachelor’s degree or equivalent experience required.• Four (4) years of experience in cybersecurity analysis or related field is preferred.• Security+, Network+, or equivalent certification is required.• Other relevant certifications such as CISSP, CISM, or CEH are preferred.• Knowledge of network and system security principles, protocols, and technologies. Includes: firewalls, intrusion detections systems, wireless systems and SIEM tools.• Excellent analytical and problem-solving skills.• Ability to work independently and in a team environment.• Experience with vulnerability assessment tools and techniques.• Familiarity with security frameworks and standards such as NIST, ISO 27001, FFIEC, CIS and PCI-DSS.• Strong interpersonal, written/verbal communication, organizational skills needed.• Demonstrated ability to deal effectively with staff is essential.• Flexibility of work hours, and proven reliability/dependability required.• Must be able to handle multiple tasks effectively and accurately.• Must have excellent problem-solving skills and possess a professional and positive attitude.