Be an early applicantLess than 25 applicants

Company

Golden 1 Credit Union · 1 day ago

IT - Info Sec Analysis and Investigation - Information Security Analyst

Greater Sacramento

Full-time

Remote

Mid, Senior Level

$98K/yr - $105K/yr

5+ years exp

Maximize your interview chances

BankingFinance

Insider Connection @Golden 1 Credit Union

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Conduct ongoing vulnerability management activities and access potential treats. Escalate any immediate and severe issues accordingly to the attention of the Manager – Information Security and appropriate reporting to senior leadership.

Coordinate and lead technology staff in the identification and remediation of system vulnerabilities across the computing environment.

Provide consultative support as a security subject matter expert on Golden 1 projects and initiatives.

Define and evaluate functional requirements and specifications of security systems for both internal and external business environments.

Work in conjunction with IT to ensure appropriate procedures and processes are in place and effective in the detection and prevention of system intrusions as well as in establishing and managing a functional anti-virus/malware/DLP policy.

Monitor, measure, test and report on the effectiveness and efficiency of information security controls as well as compliance with information security policies and procedure.

Administration of the following systems: IDS/IPS, Firewalls, email gateway, certificate issuance, URL filter, network management and identity access control.

Regularly review IDS/IPS/HIDS/SIEM rules, wireless rogue access point detection configuration and procedures and practices to ensure optimal effectiveness of security in the business environment.

Regularly review firewall, VPN, and web content filtering configuration and rules to ensure optimal efficiency and adherence information security standards.

Keep management updated on outstanding issues that are not resolved in a timely manner in accordance with established escalation procedures.

Work with internal and external auditors during examinations providing support and assistance in addressing audit recommendations.

Maintains a thorough understanding of state and federal laws and regulations related to credit union compliance including bank secrecy and anti-money laundering laws appropriate to the position.

Performs other job-related duties as necessary.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Information SecurityVulnerability ManagementFirewallsIntrusion Detection/Prevention SystemsCEH CertificationSecurity + CertificationSSCP CertificationSANS GIAC CertificationGCIH CertificationNetwork ManagementRisk Assessment MethodologiesData Loss PreventionCiscoMicrosoftLinuxMCP CertificationCCNA CertificationCryptographyNetwork TopologyVoIPMobile Device SecurityDNSLDAPVirtualizationDatabase Design/HardeningSecure MessagingEnd Point ProtectionTechnical Communication

Required

Bachelors of Science in Computer Science, Management Information Systems, Information Security Information Assurance or equivalent work experience.

Minimum of 5 years or more hands on experience in the management, configuration, administration, installation, and evaluation of network (Cisco desired) or operating systems software (Microsoft, Linux desired), hardware and applications.

At least 2 years’ experience in organizational information security, information assurance or providing security consulting services.

Demonstrates working knowledge of Firewalls and Intrusion Detection/Prevention systems.

Demonstrates working knowledge of information security principles, objectives, and security system standards including but not limited to: network topology threats, vulnerabilities, segmentation, filtering, tunneling, authenticating, access control, cryptography, system and network hardening.

Demonstrates working knowledge of risk assessment methodologies, VoIP and mobile device.

Demonstrates working knowledge of business, network systems, hardware concepts, and applications including: DNS, LDAP, virtualization, Database design/hardening, E-mail/secure messaging, Data Loss Prevention, and end point protection.

Strong sense of ethics, integrity, and professionalism.

Demonstrates the ability to articulate methodologies and concepts; communicate effectively in providing technical guidance and expertise to management and other staff.

Possession of a valid California Driver’s License is required.

One of the following security certifications: CEH, Security +, SSCP, SANS GIAC, or GCIH.

One of the following technical certifications: MCP, CCNA, or equivalent.