### Job_Dedcrip:
Although this position is primarily onsite at one of our Truliant locations, this position has a flexible work arrangement that gives you the opportunity to work remotely occasionally, or according to an established schedule determined by your manager..Purpose of the Job.Purpose of the Job.The Information Security Analyst II is responsible for identifying and responding to cyber security incidents to protect the information assets of the Credit Union.  This position will seek out weaknesses of the Credit Union systems and infrastructure by analyzing data and recommending solutions to remove, reduce or mitigate risk. This position will be responsible for the evaluation, deployment and monitoring of firewall, endpoint and cloud security solutions.  The Analyst II will have responsibility for evaluating the Credit Union third-party vendor portfolio to identify and mitigate vendor information sharing risks...Essential Functions and Responsibilities.Essential Functions and Responsibilities.Perform engineering and administrative tasks for core security functions, such as firewall, VPN, Malware detection, Intrusion Detection and Prevention (IDS/IPS), Identity Management, Security Information and Event Management (SIEM)..Perform engineering and administrative tasks for core security functions, such as firewall, VPN, Malware detection, Intrusion Detection and Prevention (IDS/IPS), Identity Management, Security Information and Event Management (SIEM)..Ingests and interprets internal and external cyber threat intelligence for determination of potential threat and impact, determines potential scope, and implements mitigations to defend the Credit Union systems and infrastructure..rd.Designs, builds and deploys next generation cloud security practices, controls and technologies to protect the Credit Union public and private cloud infrastructure.Performs vulnerability assessments and associated tracking and remediation of findings, communicating risk and reporting on mitigation status..Assesses new threat vectors, evaluating the effectiveness of current controls and utilizing intelligence analysis to create proactive mitigation around threats and vulnerabilities..Conducts research and review for latest security trends, exploits, and patches for Credit Union systems, including zero-day patching..Secures and monitors cloud productivity tools and other cloud-migrated workloads..Conducts regular security assessments across the private cloud infrastructure.  Manages the resolution of findings..rd.Monitors security on HQ and branch application servers, web servers, virtual infrastructures and networks (VMware, others), internal and external firewalls..Monitors security for LAN/WAN, wireless, VPN, and remote access for staff, Board of Directors and vendors..Monitors security for laptops and removable storage devices to ensure users are adhering to policies and procedures..Collaborates with cross-functional teams to prioritize and resolve information security findings..Contributes to the prevention of incidents by operationalizing threat intelligence to enhance or develop monitoring and detection strategies..Assists in developing and publishing information security policies, procedures, standards and guidelines based on knowledge of best practices and compliance requirements such as NIST Framework, FFIEC, ISO 27001 or IT internal risk assessment..Assists in the ongoing review and improvements to the FFIEC CyberSecurity Risk Profile and Maturity Model..Represents Truliant in the preparation and response to Internal and External Audits as well as the annual NCUA audit..Manages the information security vendor management process to identify third party information sharing risks. Recommends and drives information sharing risk mitigation strategies with third-party vendors...Other Duties and Responsibilities.Other Duties and Responsibilities.Knowledge, Skills, and Abilities.Knowledge, Skills, and Abilities.Must have working technical knowledge of current systems software, protocols, and standards, including the Microsoft Operating system and TCPIP protocol.Must have extensive network administration knowledge.Must have knowledge of security issues, techniques and implications across multiple platforms.Must have knowledge of regulatory agencies’ policies, procedures and laws governing the security of data for financial institutions.Must have knowledge of penetration testing principles, tools and techniques.Must have excellent communication skills in English, both verbal and written.Must be adept at reading, writing, and interpreting technical documentation and procedure manuals.Must have ability to conduct research into software issues and products as required.Must have proven analytical and problem-solving abilities.Must be able to evaluate systems and procedures, implementing efficiency enhancements.Experience working in a team-oriented, collaborative environment preferred.Must have ability to understand all business processes within the credit union.Must be detail oriented and well organized.Must be able to work in a general office environment.Must be flexible and able to shift resources and priorities as required.Must be able to complete all assignments with minimal supervision.Should possess a strong commitment to providing excellent service to Truliant’s members..Physical Requirements.Physical Requirements.Occasional standing, walking, bending, and stooping required.Must be able to sit at a desk for long periods of time and use a computer.Education and Background.Education and Background.Bachelor’s degree or equivalent work experience in Information Technology, Cyber Security or similar discipline.Must have a minimum of 5 years in an information security specific field such as: (Risk assessment and management, security infrastructure, information security systems, or security standards and compliance or other related disciplines).Must have security certification such as CISSP, CISM, CISA, CRISC or equivalent.Must have a minimum of 5 years of relevant professional experience in configuring, hardening and supporting cybersecurity systems.Must have a minimum of 5 years of experience configuring, hardening and vulnerability assessment of network products such as routers, switches and firewalls (Palo Alto and Juniper).Must have substantial experience with common information security management frameworks such as OWASP, and ISO 27001..Must have advanced experience with security information and event management (SIEM) systems.Must have substantial experience with IDS/IPS and other network security platforms.Preferred: Experience coding in one of the following languages: Python, Java, C/C++

### Response:

Job Requirements:- Bachelor's degree or equivalent work experience in Information Technology, Cyber Security or similar discipline.- Minimum of 5 years in an information security specific field such as: (Risk assessment and management, security infrastructure, information security systems, or security standards and compliance or other related disciplines).- Security certification such as CISSP, CISM, CISA, CRISC or equivalent.- Minimum of 5 years of relevant professional experience in configuring, hardening and supporting cybersecurity systems.- Minimum of 5 years of experience configuring, hardening and vulnerability assessment of network products such as routers, switches and firewalls (Palo Alto and Juniper).- Substantial experience with common information security management frameworks such as OWASP, and ISO 27001.- Advanced experience with security information and event management (SIEM) systems.- Substantial experience with IDS/IPS and other network security platforms.- Experience coding in one of the following languages: Python, Java, C/C.- Must have working technical knowledge of current systems software, protocols, and standards, including the Microsoft Operating system and TCPIP protocol.- Must have extensive network administration knowledge.- Must have knowledge of security issues, techniques and implications across multiple platforms.- Must have knowledge of regulatory agencies policies, procedures and laws governing the security of data for financial institutions.- Must have knowledge of penetration testing principles, tools and techniques.- Must have excellent communication skills in English, both verbal and written.- Must be adept at reading, writing, and interpreting technical documentation and procedure manuals.- Must have ability to conduct research into software issues and products as required.- Must have proven analytical and problem-solving abilities.- Must be able to evaluate systems and procedures, implementing efficiency enhancements.- Experience working in a team-oriented, collaborative environment preferred.- Must have ability to understand all business processes within the credit union.- Must be detail oriented and well organized.- Must be able to work in a general office environment.- Must be flexible and able to shift resources and priorities as required.- Must be able to complete all assignments with minimal supervision.- Should possess a strong commitment to providing excellent service to Truliants members.