What are the responsibilities and job description for the Security Analyst position at Summit Bank?
TITLE: Security Analyst
REPORTS TO: SVP, Director of Information Technology Services
FLSA: Exempt
CATEGORY: Full Time
SHIFT: Monday – Friday, 8:00am – 5:00pm
LOCATION: Eugene, Oregon
JOB PURPOSE
Responsible for threat assessment, vulnerability management, security monitoring, access/identity management, compliance, and incident response.
ESSENTIAL DUTIES AND RESPONSIBILITIES
- Threat Detection & Response: Monitor network traffic, systems, and endpoints to identify suspicious activities and prevent breaches.
- Vulnerability Management: Conduct regular vulnerability assessments and penetration tests to address potential security gaps. Provide direction on patching goals and identify priority vulnerabilities that should be mitigated first.
- Incident Response: Investigate security incidents and support forensics and recovery efforts to minimize breaches' impact.
- Security Architecture: Collaborate with IT operations and security teams to implement and manage security and assessment tools such as SIEM, EDR/XDR, IDS/IPS, vulnerability scanning.
- Policy and Compliance: Ensure alignment with security regulations and compliance standards (e.g., GLBA, FFIEC, PCI-DSS, SOX). Assist with audits and security compliance checks.
- Data Loss Prevention: Assist in development and management strategies to prevent unauthorized access or loss of sensitive data.
- Security Awareness: Assist in educating colleagues on cybersecurity best practices to foster a proactive security culture.
- Security Research & Alerts: Conduct ongoing security research, monitor industry alerts, and stay informed of trends and emerging threats to proactively protect the organization.
- Security Standard Alignments: Work towards aligning with security standards such as NIST, CIS, ISO 27001, and other relevant frameworks to enhance the organization's security posture.
POSITION QUALIFICATIONS
Required experience:
- 2 years of experience in cybersecurity, IT security, or a related role.
- Relevant industry certification such as CompTIA Security , SSCP, CISSP, etc.
- Experience with security tools - SIEM, XDR/EDR, DNS security, patch deployment, SOC solutions, etc.
- Familiarity with risk assessment and risk management concepts or processes.
DEMONSTRATED ABILITIES
- Strong self-starter, motivated, excited.
- Excellent organizational and planning skills.
- Ability to observe and react to security issues appropriately.
- Ability to handle a rapid pace and constant change associated with the industry.
- Ability to communicate effectively, both orally and in writing.
- Experience producing documentation and/or creating repeatable procedures.
WORKING ENVIRONMENT
Physical
Primarily a sedentary job. Frequent sitting when at desk. Finger dexterity required for computer work. Occasional walking and standing in immediate work area. Occasional Lifting up to 50lbs, racking server or network equipment.
Mental
Ability to balance competing priorities and meet numerous deadlines. Continuous attention to detail. Continuous speaking and hearing when interacting with staff and vendors. Continuous clarity of vision at 20 inches or less. Continuous clarity of vision at 20 feet or more.
Environmental
Office environment. The job is performed in an office environment under very comfortable working conditions; any disagreeable elements are generally absent during normal performance of job. Infrequent, but potential exposure to potentially hazardous condition, i.e., robbery, angry customers, etc. Receives detailed instructions and procedures to be followed to minimize the risk. The worker is not substantially exposed to adverse environmental conditions, however, occasional travel to offices may be required in moderate winter weather conditions. Occasional travel to satellite branches for maintenance and implementation of network infrastructure equipment.
