Information Security Analyst

At Community First, we believe the security of our technology and infrastructure is mission critical. As an Information Security Analyst, you will independently administer security technologies, investigate security events, and own recurring security processes that protect member data, employee systems, business operations, and member-facing services.

This is a hands-on security operations role with broad technical responsibility. The Analyst is expected to configure and maintain assigned controls, investigate alerts to a defensible conclusion, improve repeatable processes, and help ensure security work is documented, measurable, and supportable.

As our Information Security Analyst, you will:

• Configure, maintain, monitor, and troubleshoot assigned security platforms across endpoint protection and EDR, identity and access management, email and web security, vulnerability management, firewalls, IDS/IPS, SIEM and centralized logging, cloud, data protection, and related controls.
• Independently investigate routine alerts using endpoint, identity, network, email, cloud, and SIEM data, documenting the reasoning behind disposition and escalation decisions rather than only the outcome.
• Operate vulnerability-management workflows from scan coverage and finding validation through ownership, due dates, exception routing, and verified closure.
• Tune detection rules, dashboards, alert thresholds, and operational queries to reduce noise while validating that true-positive coverage is retained.
• Support containment, evidence gathering, recovery, communication, after-action review, and control-improvement work during incidents.
• Plan and implement approved routine security changes, participate in review of higher-risk changes, and contribute security requirements and testing to technology projects.
• Create and maintain runbooks, standards, diagrams, queries, dashboards, troubleshooting notes, and documentation that another team member can execute unaided.
• Use PowerShell, Python, platform workflows, APIs, or similar methods to reduce manual effort, improve accuracy, and strengthen traceability with appropriate review and secure credential handling.
• Support audits, regulatory examinations, access reviews, risk assessments, control testing, remediation validation, business continuity, disaster recovery, and tabletop exercises.
• Help onboard and coach Information Security Specialists and communicate security requirements, impact, risk, and resolution clearly to technical and non-technical audiences.

An ideal candidate will have a combination of:

• Bachelor's degree in cybersecurity, information technology, computer science, or related field, or equivalent combination of education and technical experience.
• 2+ years of security administration, systems administration, network administration, or comparable hands-on technical experience.
• Demonstrated ability to configure and maintain enterprise security tooling, not only monitor it.
• Solid working knowledge of network infrastructure, including ports, protocols, routing, switching, segmentation, and traffic flow.
• Working knowledge of enterprise operating system administration across Windows and Linux.
• Practical experience with several of the following: centralized logging or SIEM, endpoint detection and response, firewall administration, intrusion detection and prevention, vulnerability management, email security, cloud security controls, and identity and access management.
• Ability to investigate a security event to a defensible conclusion and explain the reasoning to a non-specialist.
• Ability to develop and document repeatable processes and procedures that others can execute.
• Ability to participate in the department's approved after-hours maintenance or incident-response process.

Preferred experience and credentials include:

• CompTIA CySA+ or Security+, ISC2 SSCP, Security Blue Team BTL1, GIAC GSEC, Microsoft, cloud, or comparable documented professional development.
• Scripting or automation experience in PowerShell, Python, APIs, platform workflows, or a comparable method.
• Experience with cloud platform security controls in Microsoft Azure, Microsoft 365, AWS, Google Cloud, or another major cloud provider.
• Experience supporting audits, regulatory examinations, access reviews, control testing, or evidence collection.
• Regulated financial services experience with exposure to NCUA 12 CFR Part 748, FFIEC examination guidance, GLBA-related safeguards, payment-card requirements, or similar control expectations.

Certifications are valued as evidence of learning and professional development. They are not a substitute for demonstrated technical capability, sound judgment, and practical experience. Community First supports employees at all stages of their careers in deepening their professional skills and pursuing certifications, credentials, and ongoing education.