UNKNOWN

ADAPTED_NOW

Working knowledge/experience with network systems, security principles, applications, and risk and compliance initiatives such as Gramm-Leach Bliley Act (GLBA), Payment Card Industry (PCI), Health Information Portability and Accountability Ace (HIPAA), Sarbanes-Oxley Act (SOX) and the General Data Protection Regulation (GDPR). Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP, and other network and system monitoring tools.

**If you are a current FIB employee, please apply through the Career Worklet in the Employee Portal. This position can be located at our Sioux Falls, SD Downtown and Great West Center in Billings, MT. What’s Important to You We know your career is just one aspect of a meaningful, complex, and demanding life. That’s why we designed our compensation and benefits package to provide employees and their families with as much choice as possible. Generous Paid Time Off (PTO) in addition to paid federal holidays. Student debt employer repayment program. 401(k) retirement plan with a 6% match. The health and happiness of the places we call home matter to us. Learn a little more about what we do for the communities we serve and why we want YOU to be a part of it. We encourage you to apply. Reach for what you want and tell us why your work ethic and willingness to learn make you a natural fit for #TeamFirstInterstate. SUMMARY The Security Operations Analyst III is responsible for activities relating to monitoring and responding to security events. This position receives, researches, triages, and documents all security events and alerts as they are received. Also, this position supports multiple security-related platforms and technologies, interfacing with others within the IT organization, as well as other internal business units and external customers/partners. Events will be generated from endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third parties, and other sources. Receives information sharing and analysis center (ISAC) information and guides hunting for potential compromise across the infrastructure. ESSENTIAL DUTIES AND RESPONSIBILITIES Monitors SIEM, EDR, and other security monitoring solutions; processes responses for security events on a 24x7 basis. Provides feedback to incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention). Stays current with and remains knowledgeable about new threats. Analyzes attacker tactics, techniques, and procedures (TTPs) from security events across a large heterogeneous network of security devices and end-user systems. Guides and participates in threat modeling collaboration with other members of the security team. Guides and leverages automation and orchestration solutions to automate repetitive tasks. Assists with incident response as events are escalated, including triage, remediation, and documentation. Leads threat and vulnerability research across event data collected by systems. Leads, investigates, and documents events to aid incident responders, managers, and other SOC team members on security issues and the emergence of new threats. Works alongside other security team members to hunt for and identify security issues generated from the network, including third-party relationships. Shares information as directed with other team members. Manages security event investigations, partnering with other departments (e.g., IT) as needed. Evaluates SOC policies and procedures and recommend updates to management as appropriate. Adheres to service level agreements (SLAs), metrics, and business scorecard obligations for ticket handling of security incidents and events. Partners with the security engineering team and recommend improvements to tool usage and workflow, as well as with the advanced threats and assessment team to mature monitoring and response capabilities. Leverages knowledge in multiple security disciplines, such as Windows, Unix, Linux, data loss prevention (DLP), endpoint controls, databases, wireless security, and data networking, to offer global solutions for a complex heterogeneous environment. Maintains working knowledge of advanced threat detection as the industry evolves. Performs other duties as assigned. QUALIFICATIONS To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. KNOWLEDGE, SKILLS AND ABILITIES Experience driving measurable improvement in monitoring and response capabilities at scale. Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP, and other network and system monitoring tools. Knowledge of a variety of Internet protocols. Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively. Working knowledge/experience with network systems, security principles, applications, and risk and compliance initiatives such as Gramm-Leach Bliley Act (GLBA), Payment Card Industry (PCI), Health Information Portability and Accountability Ace (HIPAA), Sarbanes-Oxley Act (SOX) and the General Data Protection Regulation (GDPR). Working knowledge of the MITRE ATT&CK Framework. EDUCATION AND/OR EXPERIENCE High School Diploma or General Education Degree (GED) required Bachelor's Degree in Information Technology, Security Engineering, or related field preferred 4-6 years of information security monitoring and response related experience required LICENSES AND CERTIFICATIONS CompTIA Security + preferred or CEH - Certified Ethical Hacker preferred or GCIF - GIAC Information Security Fundamentals preferred or SCCP - Systems Security Certified Practitioner preferred or CISA - Certified Information Systems Auditor preferred or CISM - Certified Information Security Manager preferred or CISSP - Certified Information Systems Security Professional preferred or OSCP - Offensive Security Certified Professional preferred or GSE - GIAC Security Expert preferred or PHYSICAL DEMANDS AND WORKING ENVIRONMENT The physical demands and work environment are representative of those that must be met or encountered to successfully perform the essential functions of the job. In compliance with the Americans with Disabilities Act, the company provides reasonable accommodation to qualified individuals with disabilities and encourages both prospective and current employees to discuss potential accommodations with the employer. Dexterity of hands/fingers to operate computer keyboard and mouse - Frequently Lifting - Occasionally (up to 50 lbs) Sitting - Frequently Standing - Occasionally Noise Level - Moderate Typical Work Hours - M-F (8-5) Regular and Predictable Attendance - Required **If you are a current FIB employee, please apply through the Career Worklet in the Employee Portal. First Interstate Bank is an equal opportunity employer committed to a diverse workforce and a barrier-free employment process. Employment is based solely on an individual's merit and qualifications directly related to the position. We do not discriminate on the basis of race, color, religion, national origin, ancestry, pregnancy status, sex, age, marital status, disability, medical condition, or any other characteristics protected by law. We make all reasonable accommodations to meet the obligations set forth under the Americans with Disabilities Act (ADA) and state disability laws. In order to ensure reasonable accommodations for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans' Readjustment Assistance Act of 1974, and Title I of the Americans with Disabilities Act of 1990, as amended, individuals that require accommodation in the job application process for a posted position may contact us Monday through Friday, 8 am to 5 pm MST at careers@fib.com. All applicants must pass pre-employment screenings including a background check. First Interstate BancSystem participates in E-Verify which will require new employees to verify their identity and employment eligibility through the internet-based system operated by the Social Security Administration (SSA) and the Department of Homeland Security (DHS). E-Verify Notice English or Spanish Right to Work Notice English or Spanish

First Interstate Bank

Security Operations Analyst III

Alliance/Partner Marketing

Americans with Disabilities Act (ADA)

Analysis Skills

Applications Security

Automation

Benchmarking

CEH - Certified Ethical Hacker

CISA - Certified Information Systems Auditor

CISM - Certified Information Security Manager

CISSP - Certified Information Systems Security Professional

Communication Skills

CompTIA - Computing Technology Industry Association

CompTIA Security+

Computer Mouse Hardware

Computer Networks

Computer Security

Data Collection

Documentation

English Language

Event Management

GIAC - Global Information Assurance Certification

GSE - GIAC Security Expert

HIPAA (Health Insurance Portability and Accountability Act)

High School Diploma

Homeland Security

Hunting

Identify Issues

Incident Response

Information/Data Security (InfoSec)

Internet Protocols

Intrusion Detection Systems

Intrusion Detection and Prevention (IDP)

Intrusion Prevention Systems

Keyboards

Leaching

Lift/Move 50 Pounds

Linux Operating System

Loss Prevention

Metrics

Microsoft Windows Operating System

Multiplatform/Cross-Platform

Network Monitoring

Network Security

Network Systems

Operational Audit

Physical Demands

Policy Evaluation

Process Improvement

Regulations

Risk

SCCP (Signaling Connection Control Point) Protocol

SSCP - Systems Security Certified Practitioner

Sarbanes-Oxley Act (SOX)

Scorecarding

Security Analysis

Security Attacks

Security Information and Event Management (SIEM)

Security Infrastructure

Security Monitoring

Service Level Agreement (SLA)

Social Security Administration

Spanish Language

System Operations

Threat Modeling

Unix Operating Systems

Wireless Security

FULL_TIME

FEED

OTHER

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Support the enhancement and on-going management of governance activities from a Federal perspective, including vendor assessments, annual enterprise risk assessments, enterprise risk registers, security awareness and training, and maintenance of a GRC.

Essential Duties and Responsibilities:- Perform complex risk analyses and risk assessment.- Establish and satisfy Information Assurance (IA) and security requirements based upon the analysis of user, policy, regulatory, and resource demands.- Support customers in the development and implementation of doctrine and policies.- Advise information system owners on client/project security policies and requirements for systems.- Keep abreast of emerging security technologies and make appropriate recommendations regarding the enhancement of the security posture of systems and their implementation.<ul><li>Provide recommendations on alignment of security policies with existing Federal and DoD customer requirements. </li><li>Collaborate with the Enterprise (Shared Services) ISSO to ensure proper alignment of organizational governance with Federal and DoD customers. </li><li>Collaborate with project ISSO's (existing contracts) and Business Development and Capture Teams to ensure proper alignment of organizational governance with existing and prospective Federal and DoD customers. </li><li>Assist the Enterprise (Shared Services) ISSO with application of security policies to shared services supporting Federal and DoD customers. </li><li>Recommend enhancements that align governance with Federal and DoD customers. </li><li>Support the enhancement and on-going management of governance activities from a Federal perspective, including vendor assessments, annual enterprise risk assessments, enterprise risk registers, security awareness and training, and maintenance of a GRC. </li></ul>Minimum Requirements - Please refer to the additional information section of the job requisition for this opening to determine clearance eligibility required. - Bachelor's Degree in related field.- 5-7 years of relevant professional experience required.- Equivalent combination of education and experience considered in lieu of degree.<ul><li>Bachelor's degree in cybersecurity, computer science, information assurance, or related field</li><li>7+ of security governance development and management for a corporate organization supporting Federal and DoD customers.</li><li>Certifications like CISSP, CISM, CISA, or GRC / audit or risk certifications desired.</li><li>Experience supporting security governance for organizations using FedRAMP'd CSO's as it pertains to system-specific and hybrid controls.</li><li>RMF and A&A experience desired</li><li>Strong understanding of Federal requirements to include but not limited to applicable Executive Orders, FISMA, FIPS, CMMC, NIST 800-171, NIST 800-53, NIST 800-60, and NIST 800-65.</li><li>Experience with Federal and DoD GRC tools. (CFACTS, CSAM, eMASS, etc.)</li><li>Experience mapping and cross walking policies, standards, and procedures to multiple security frameworks.</li><li>Exercise judgement in selecting methods, techniques, and evaluation criteria for obtaining results.</li><li>Network with key contacts outside own area of expertise.</li><li>Develop solutions to a variety of complex problems.</li><li>Work requires considerable judgment and initiative.</li><li>Ability to communicate Federal language (NIST verbiage) in understandable business terms.</li><li>Excellent interpersonal skills, presentation skills, and oral / written communication skills.</li><li>Strong customer service abilities required.</li><li>Ability to work collaboratively with a broad range of staff.</li><li>Skilled in Microsoft Office software including Word, Excel, and PowerPoint; Smartsheet; and Lucid.</li><li>Ability to perform comfortably in a fast-paced, deadline-oriented work environment.</li><li>Ability to execute many complex tasks simultaneously and work as a team member as well as independently.</li></ul>EEO Statement Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics. Pay Transparency Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances. Accommodations Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process-including accessing job postings, completing assessments, or participating in interviews,-please contact People Operations at applicantaccom@maximus.com. Minimum Salary $ 90,780.00 Maximum Salary $ 122,820.00 <ul><li/></ul><img alt=" " height="1" src="https://ars2.equest.com/?response_id=ce18648aba2ef41b4e674baef394c72c&view" width="1"/>

MAXIMUS provides business services to help governments operate health and human services programs, mostly at the state and national levels. The company's health services segment offers outsourced program management and administrative services,

Information Security Jobs in Billings, MT

Resume Resources

Get noticed by top employers!

Information Security Jobs in Billings, MT

Security Operations Analyst III First Interstate Bank

Sr Analyst - ISO Security Governance Maximus

Resume Resources