Cybersecurity Analyst

Essential Duties And Responsibilities

• Provide Cybersecurity technical expertise and support in the Information Security Program’s strategic initiatives and objectives including:
• Write, evaluate, and tune rules for DLP, Email Gateway, and other security systems
• Help ensure security systems/software configuration, policies, and hardening guidelines are operating effectively
• Recommend improvements to existing security controls and security systems
• Monitor technical IT/IS controls and assist with control reviews
• Monitor existing and emerging external/internal cyber threats
• Monitor security tools and aid in the remediation of vulnerability findings
• Troubleshoot escalated Help Desk tickets and/or user issues related to Cybersecurity
• Absorb investigations of Cybersecurity incidents and/or events
• Absorb technical projects requiring cybersecurity oversight to ensure that policies, procedures, and standards are met
• Collaborate with business units and foster strong working relationships
• Develop and prepare periodic reporting to the VP, Information Security Officer on Cybersecurity matters

Additional Responsibilities

• Demonstrates high degree of professionalism in communication, integrity, work quality, attendance, appearance, attitude, and teamwork with customers, peers, and management
• Adheres to all Sunwest Bank policies, procedures, and safety regulations, as well as local, state, and federal laws
• Attends training and maintains a basic knowledge of procedures to ensure compliance with laws and regulations governing financial institutions, as they apply to your position and job responsibilities, with an emphasis on Information Security, Information Technology, Cybersecurity, Consumer Privacy, and GLBA
• Additional duties as assigned as it relates to the position

Qualifications

• Must have 3+ years of experience as a Cybersecurity Analyst, System Administrator, Information Security Engineer, or similar role
• Working experience with multiple security platforms such as: Email gateway, DLP, EDR, IDS/IPS, URL filtering, security awareness training platforms, etc.
• Knowledge of information security frameworks (ISO, NIST, OWASP, etc.) and best practices is a plus
• Experience implementing information security systems and/or software is a plus
• Knowledge of multiple computing platforms, including Windows, Mac, Linux, networks, and endpoints
• Experience with incident response systems and processes (IDS/IPS monitoring, reporting) is a plus
• Experience with network security and/or firewall configuration and management is a plus
• Experience with internal/external vulnerability management systems and processes is a plus
• Experience with security hardening of systems/devices, as well as anti-virus management is a plus
• Experience with data loss prevention systems and processes, as well as mobile device management is a plus
• Experience troubleshooting technical information security and/or IT-security related issues is a plus
• Must have strong people skills and be able to communicate with all levels of management effectively
• Experience with SDLC, data governance, and/or data privacy (CCPA) is a plus
• Experience with business continuity and/or disaster recovery is a plus
• Experience with automating security tools and/or software is a plus
• Experience with information security-related assessments is a plus
• Experience in fintech and/or banking is a plus

Education & Certification Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or Information Security
• CEH (Certified Ethical Hacker) preferred
• Security+, CySA+, or similar recommended
• COMPETENCIES: Data Analysis, Threat Analysis, Technical Acumen, Troubleshooting, Professionalism, Communication, Organization, Initiative

Physical Demands

• In general, the following physical demands are representative of those that must be met by an employee to successfully perform the essential functions of this job.
• Reasonable accommodations may be made to allow differently abled individuals to perform the essential functions of the job within the environment.
• The workspace is clean, orderly, properly lighted and ventilated with the proper safety compliance
• Noise levels are considered moderate