Cybersecurity Analyst - Heritage Federal Credit Union

Heritage Federal Credit Union, a Readers' Choice Best Credit Union gold award recipient, is growing thanks to the focus on helping our members and community. At Heritage, we foster a dynamic and collaborative environment where your contributions truly make a difference. As we continue to expand, we are searching for a Cybersecurity Analyst to join our amazing team!

The Cybersecurity Analyst , under the direction of the SVP Enterprise Risk Management & Information Security Officer (SVPERMISO), assists in all aspects of, and in various assignments supporting the information security, incident response, user access review, business continuity, and vendor management programs to ensure compliance with federal and state regulations specifically for information security and cybersecurity. This is a role that involves independently conducting complex investigations; analyzing, collecting, monitoring, reporting cybersecurity metrics, alerts, logs, reports, surveillance controls in alignment with regulatory and credit union expectations. Additional responsibilities include assisting in risk assessments, delivery and development of awareness training, and development and enforcement of security policies, compliance measures, and IT security data flow diagrams.

What you’ll do:

• Independently investigate alerts and security incidents, perform root cause analysis, and recommend corrective actions to SVPERMISO.
• Support containment and recovery activities during security incidents.
• Tune SIEM and endpoint detection tools to improve effectiveness and reduce false positives.
• Support risk assessments, controls testing, and regulatory exams; Maintain logs and documentation for audits and NCUA exams.
• Assist in security audits and risk assessments to identify weaknesses and recommend fixes; review vulnerability reports and prioritize remediation in collaboration with IT and business stakeholders.
• Monitor threat intelligence and assess relevance to the credit union’s environment; Research new threats, vulnerabilities, and mitigation techniques to stay proactive.
• Assist in the production of incident reports, management metrics, and executive summaries for management and regulators.
• Participate in tabletop exercises and incident response testing.
• Monitor security tools (i.e. SIEM, IDS/IPS, EDR) and perform initial alert triage following documented procedures.
• Escalate potential incidents and suspicious activity with clear documentation and timelines to SVPERMISO.
• Assist with incident response activities, including evidence gathering and post-incident reporting.
• Assist in the development and implementation of security awareness and required compliance training.
• Review user access rights and permissions based on least privilege.