Security Analyst II

When you choose a job at Andrews Federal Credit Union, you give yourself the opportunity to grow, advance and make a difference. Andrews Federal is a mission-driven financial institution that focuses on giving members the tools they need to reach their financial goals.

We are continually developing our team of dedicated employees who are ready to serve. To create and retain our elite workforce, we offer competitive compensation and benefits plans to meet the needs of our growing workforce, including:

• 12 Paid Holidays a Year, Including Your Birthday
• Retirement Plans – 401(k) with a 6% Match
• Childcare Stipend up to $2600 to assist Working Families
• Discount on Lending Products
• Tuition Reimbursement and Career Development Programs and Opportunities
• Employee Assistance Program – 24/7 Support for Families
• Affordable Healthcare Plan including Medical, Dental, Vision, and Rx
• Employer paid Long Term Disability, Life Insurance, and AD&D
• Short-Term Disability
• Vacation Leave and Sick Leave
• Free Parking

And when you are part of Team Andrews, you have the opportunity to be part of something bigger-- to support the financial goals and dreams of Andrews Federal members in the US, Europe and worldwide.

Join our success story - and let us help you shape your career story!

Purpose of Position

Under the direction of the Director of Cybersecurity, the Security Analyst II is responsible for supporting all facets of the information and cyber security program for Andrews Federal Credit Union’s system and networks. This includes detecting, monitoring, analyzing, and resolving security incidents

through the use of various security technologies including the Microsoft 365 Security suite of products. This position shall work independently and collaboratively on projects and assignments to promote a healthy security culture and environment for the credit union.

Essential Duties

• Deploy and maintain data security technologies using the Microsoft product suite to include data classification, data labeling, and data loss prevention.

• Triage and respond to security events from Andrews Federal Credit Union’s security systems, including: Perimeter Protection (Firewall, IDS/IPS, Email Gateway, etc.); Virus Protection; Spyware Protection; investigate and analyze security events/anomalies/and respond to incidents.

• Drive identity management, zero trust, and network security programs forward through the use of various technologies.

• Assists in vulnerability management review, analysis, and reporting for all systems according to policy.

• Helps prepare for security audits, vulnerability assessments, and NCUA audits.

• Verifies and reports configuration of servers, routers, switches, etc., as determined by internal standards, NIST CSF Framework, and CIS Baselines.

• Provide reports to IT management regarding security system performance, incidents, and status.

• Responsible for ensuring hardware and software life cycle terms are followed.

• Supports new security software/hardware, establishes monitoring procedures, upgrades for all security software and hardware.

• Assist with security project implementations on a timely basis.

• Provides support to Andrews Federal’s business units to ensure security measures and policies are enforced.

• Works with IT application developers and database administrators to identify and address security issues and recommendations.

• Maintains documentation of security incidents, procedures, policies, etc.

• Complete special and/or continuous improvement projects as assigned (directly or indirectly).

• Analyze and report on security system and end user activity audits.

• Work with Risk Management personnel to ensure proper access control with least privilege.

• Work with Risk Management personnel and third parties to respond to security incidents.

• Keep current with emerging security technologies, news/trends, and issues.

• Performs other related work as assigned and demonstrate initiative using available resources to achieve established goals.

Education

Bachelors Degree (BS in Computer Science, Information Technology, Engineering, or related field.

Length of Required Experience

3 to 5 years

Required Experience

• Minimum of 3 years of relevant IT Security technical experience.

• Knowledge and experience using Microsoft 365 Security technologies such as Microsoft Defender, Intune, and Purview required.

• Knowledge and experience using Cisco technologies such as Duo, Identity Services Engine , Secure Service Edge, and Catalyst SD-WAN preferred.

• Knowledge of network transport protocols, routing protocols, and switching protocols.

• Knowledge of security methodology, risk assessment process, and incident response procedures; experience with network security appliances such as firewalls, IDS/IPS, DLP, SIEMs, routers/switches, etc.

• Must possess strong skills in Word, Excel, latest version of Windows Operating Systems and Windows Servers, Microsoft Project, and other software as needed.

• Familiarity with project planning methodology and willingness to work in a team environment to complete projects in a timely fashion.

• Must work independently on broad assignments and be capable of making decisions both involving projects as well as ongoing troubleshooting.

• Must work effectively with the Information Technology staff to negotiate equitable and reasonable division of duties.

• Highly motivated and have strong customer focus with the ability to interface with all levels of staff.

• Strong presentation skills which may be used to document analysis and deliver technical presentations to customer teams in an articulate and effective manner using a variety of media (visual, written and oral).

• Experience working with financial institutions such as credit unions preferred.

Physical Requirements

Requires the ability to sit at a desk and computer for extended periods of time and must be able to lift 25 pounds.

Annual Salary Range

$100,000 to $130,000

In accordance with the Americans with Disabilities Act, requirements may be modified to reasonably accommodate disabled individuals. However, no accommodation will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization. EOE