Formed in 1934, Telhio began as a credit union for Columbus Telephone Company (now AT&T) employees. Telhio now serves over 70,000 member-owners throughout central and southwest Ohio. As one of the largest credit unions in Ohio, Telhio is a strong financial institution that continues to serve its members through extraordinary service, innovative financial solutions and community involvement. After generations of service and growth, we never lose focus of our three core values - Caring, Commitment, and Integrity.

Position Summary

The Jr Systems Security Analyst provides cybersecurity functions for Telhio's networks and cloud software. This includes performing real-time cyber threat intelligence analysis, correlating actionable security events, performing network traffic analysis using raw packet data, and participating in the coordination of resources during the incident response process. This position will schedule, execute and report on controls assessments in a highly diverse IT environment including data centers, Cloud Service Providers, and a wide variety of Major Applications and databases.

What You Will Do

Manage program assessments from initial planning, scheduling, communications with systems owners and related stakeholders through to final reporting
Prepare required assessment documentation
Assist in process improvement and automation for the assessment methodology
Conduct technical evaluation of information system design, focusing on information security aspects and accreditation according to the NIST & FFIEC Risk Management Framework
Utilize various information system documentation, inspection tools to audit systems, analyze potential vulnerabilities and identify mitigation approaches
Acquire and review program documentation such as Risk Assessments, Security Plans, and Contingency Plans
Analyze and determine compliance with applicable state and NCUA regulations
Conducting technical, management, operational and privacy reviews
Application penetration testing
Ensure timeliness and quality of deliverables
Review DoD and open source intelligence for threats.
Identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs
Triage alerts to identify malicious actors on network
Complete moderate-level cyber analysis of potential events
Organize and facilitate information security training, workshops, and events
Develop regular targeted or company-wide communications on various security-related topics
Develop training-related materials such as guides, handbooks, videos, and web-based tutorials
Monitor employee engagement with security education programs and knowledge retention, including metrics around computer-based training and security assessments

What You Will Need

Bachelor's Degree and 1+ years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of degree. Required
1-3 years Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements. Required
1-3 years Demonstrated hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, Full Packet Capture), and other attack artifacts in support of incident investigations. Preferred
1-3 years Experience and proficiency with any of the following: Anti-Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, Network Forensics. Preferred
1-3 years Experience with malware analysis concepts and methods. Preferred
1-3 years Unix/Linux command line experience. Preferred
1-3 years Scripting and programming experience. Preferred
1-3 years Demonstrated understanding of the life cycle of network threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs). Preferred
Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings (High proficiency)
Strong analytical and troubleshooting skills. (High proficiency)
Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security domain and an ability to think and work independently (High proficiency)
In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. ArcSight, Splunk, Nitro/McAfee Enterprise Security Manager, QRadar, LogLogic). (Medium proficiency)
Experience with malware analysis concepts and methods. (High proficiency)
Unix/Linux command line experience. (Medium proficiency)
Scripting and programming experience. (Medium proficiency)
Certification such as CompTIA Security+ CE, ISC2 SSCP. Preferred

What You Will Earn

Competitive pay
Benefits: several medical plan options, dental, free vision, free life and free disability insurance
6% matching and immediately vested 401(K) plan
Generous schedule for paid holidays, vacation and personal time for a healthy work-life balance
Opportunity for personal career growth, continued education and mentorship programs
Volunteer opportunities impacting the local community

This is a Non-Collective Bargaining Unit.

Telhio is an Equal Opportunity Employer.

Telhio Credit Union

New Jobs

Jr. Systems Security Analyst