Information Security Analyst III (On-Site)

Job Description

HAPO Community Credit Union is an organization that believes in providing service that focuses on our members and giving back to the communities in which we do business - "Community" is our middle name. Our Standard of Service is to Defy Expectations. We promote individuality and encourage our employees to Defy Expectations®: To treat every situation as a unique opportunity to be in the moment and go beyond what is expected. We value every member and appreciate the opportunity to serve you.

Come defy expectations with us!

HAPO Health Benefits

• No cost premium health insurance for employee and eligible dependent(s), including medical, dental and vision
• Accidental death and dismemberment insurance
• Long term and Short term disability

HAPO Professional Benefits

• Competitive pay
• Pension Plan
• 401K program with match
• Flexible spending account (medical and dependent care)
• 0% interest on select personal loans

HAPO Personal Benefits

• Employee Assistance Program (EAP)
• Paid time off
• 11 paid holidays per year
• Paid Birthday day off
• HAPO Anniversary day off
• Volunteer Opportunities (Both Paid and Volunteer)
• Employee Milestone Anniversary Bonus

HAPO is now accepting applications for an Information Security Analyst III. We are seeking an experienced, ambitious, and self-motivated individual who strives to represent HAPO’s core commitment “Be in the Moment” and deliver service that will “Defy Expectations.” The Information Security Analyst III is responsible for the identification, tracking, monitoring, and response support of information security threats. This position monitors multiple security technologies to detect, investigate, and escalate potential security events; assists with the development and implementation of security processes and procedures; supports vulnerability management, phishing campaign planning, risk assessments, security control reviews, and policy maintenance; and serves as a technical resource and training support for Level I and II analysts.

Essential Job Functions Include But Are Not Limited To

• Comply with Change Management/Change Control processes and procedures.
• Monitor and analyze information from logging and alerting systems.
• Investigate and escalate security events following all procedures, playbooks, standards, programs, and policies.
• Assist in performing Security Analyst I and II duties during analyst absences.
• Oversee training efforts of Level I and II analysts.
• Serve as a resource for questions related to monitoring and event response processes.
• Develop and review monitoring procedures and response playbooks.
• Stay current with information security threats, trends, tactics, and industry best practices.
• Conduct vulnerability scans according to schedule and assist in designing vulnerability scans.
• Design and plan phishing campaigns with the involvement of Level I and II analysts.
• Route information security support requests.
• Fully understand the capabilities of security solutions within the monitoring responsibility of the Information Security Analyst.
• Oversee the SIEM platform.
• Develop and modify event and incident detection rules and logic.
• Assist in developing configuration standards and best practices.
• Assist in conducting information security risk assessments.
• Assist in conducting assessments and audits of security controls not under the direction of the Information Security Department.
• Assist with designing security solutions.
• Assist with developing and maintaining information security policy under the direction of Information Security management.

Skills & Abilities

• Advanced knowledge of Windows Operating Systems.
• Working knowledge of Linux Operating Systems.
• Understanding of computer networking and protocols.
• Critical and analytical thinking.
• Independent learning.
• Strong knowledge of Microsoft Security Solutions, including Microsoft Defender for Endpoint/Server, Purview, and Defender for Office.
• Kusto Query Language.
• SIEM management, Sentinel preferred.
• Ability to develop and modify event and incident detection rules and logic.
• Knowledge of vulnerability scanning practices, phishing campaign planning, risk assessments, and security control assessments/audits.
• Proficiency with FFIEC Cyber Assessment Tool requirements, NIST 800-53, and CIS Top 20 Security Control elements.
• Ability to mentor, train, and provide guidance to Level I and II analysts.
• Strong knowledge of Microsoft Office products.
• Basic understanding of programming and scripting languages.
• Excellent communication and writing skills.
• Willingness to learn and keep an open mind.
• Ability to find ways to improve processes, procedures, and standards.

Requirements

• High School Diploma or General Education Development (GED) certificate.
• Associate’s degree or equivalent work experience.
• Prior information security, security operations, vulnerability management, or related technical experience sufficient to perform Level III responsibilities.

Location: Required to be primarily On-Site in Richland (WA) with the possibility of hybrid work from home schedule.

Schedule: Must be able to work 35-40 hours a week between the hours of 8:30am – 6:30pm M-F *This position may require responses to critical alerts outside of normal business hours and the ability to work on weekends and afterhours, when necessary, under the direction of the Information Security Officer.

Starting Salary (DOE): $80,364.75 - $120,547.02

• Typically, Selected candidates are hired between the minimum and midpoint range, based on applicable experience and qualifications.

HAPO is an equal opportunity employer that values employees and supports an organizational culture of diversity, respect and personal and professional growth.

Please note that only candidates selected to move forward in the interview process will be contacted. Thank you for your understanding.