> Markdown version of [/jobs/ext/1147423-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/1147423-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Analyst - **Company:** Heritage - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cisco PIX, Cloud Computing, Cyber Security, Disaster Recovery, Information Security Management, IT Management, Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Routing, Network Segmentation, Phishing, Security Information and Event Management, Virtual Local Area Networks, Software Vulnerability Management, Information Security Management System, Firewalls (Computer Science), Information Technology, Palo Alto Networks, Fortinet, Machine Learning Operations, Cisco - **Published:** July 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=32551011917e8ba1 ## About the Role * Bachelor's degree in Information Technology, Computer Science, Cybersecurity or related field (or equivalent experience) * 5+ years of experience in: network engineering, IT infrastructure or cybersecurity operations. Preferably in financial services or a regulated industry. Technical Skills * Strong knowledge of routing and switching (Cisco, Aruba, or similar) * Experience with firewalls (e.g., Fortinet, Palo Alto, Cisco ASA) * Familiarity with VPNs, VLANs, QoS, and network segmentation * Understanding of cloud networking (Azure/AWS) * Knowledge of cybersecurity principles and frameworks Key Competencies * Strong problem-solving and analytical skills * Ability to work independently and manage multiple priorities * Excellent communication skills for both technical and non-technical stakeholders * High attention to detail and commitment to security and compliance * Proactive mindset with a focus on continuous improvement Work Environment & Expectations * On-call availability for critical incidents and maintenance windows * Occasional travel to branch locations * Ability to work in a fast-paced, highly regulated environment ## Description The Cybersecurity Analyst is responsible for protecting the bank's information assets, systems, and data through proactive threat analysis, security operations, and compliance with applicable regulatory and industry frameworks. This role serves as a key contributor to Heritage Bank's information security program, with ownership of information security management alignment, AI security governance, and continuous monitoring. Working closely with the VP of Information Technology and in close partnership with the Network Security Engineer, this position ensures the confidentiality, integrity, and availability of bank systems while fostering a culture of security awareness across the organization. Core Responsibilities Security Operations & Threat Management * Monitor SIEM systems and alert on anomalies, threats, and policy violations * Define detection rules and policies for IDS/IPS; own EDR and email security controls * Own the vulnerability management program: coordinate assessments, assign risk ratings, and track remediation with the Network Security Engineer * Perform threat intelligence analysis and translate findings into defensive action * Lead security analysis and forensic response during incidents; coordinate network-level containment with the Network Security Engineer * Define patching strategy and standards; partner with the Network Security Engineer on execution Information Security Management & Regulatory Compliance * Own alignment to information security management standards and best practices * Maintain the ISMS including risk register, statement of applicability, and control documentation * Coordinate internal audits and gap analyses against applicable cybersecurity frameworks and FFIEC guidance * Support regulatory examinations; prepare and present security posture documentation * Develop and maintain security policies, standards, and procedures * Govern access control policies and conduct privilege access reviews with the Network Security Engineer AI Security & Emerging Technology Risk * Develop and maintain the bank's AI security framework, governing the secure adoption and use of AI/ML tools and platforms * Assess risks associated with generative AI, third-party AI integrations, and internal AI-assisted workflows * Define controls for AI model governance including data privacy, bias risk, adversarial inputs, and output integrity * Evaluate AI vendor security practices and ensure appropriate contractual and technical safeguards are in place * Monitor the evolving AI threat landscape and provide guidance on emerging risks to leadership * Partner with business units to establish acceptable use policies for AI tools in alignment with bank risk appetite Security Awareness & Training * Design and deliver ongoing security awareness training for all bank staff, including phishing simulations * Serve as a subject matter expert for staff on cybersecurity best practices and emerging threats * Promote a security-first culture in alignment with Heritage Bank's values Third-Party & Vendor Risk * Conduct cybersecurity due diligence on third-party vendors and technology providers * Review vendor security assessments (SOC 2, penetration tests, questionnaires) and escalate gaps * Provide cybersecurity risk assessments to inform vendor onboarding decisions; collaborate with procurement and the Network Security Engineer on ongoing third-party risk monitoring Documentation & Reporting * Maintain accurate security documentation including risk registers, incident logs, and audit evidence * Produce regular cybersecurity metrics and reporting for IT leadership and senior management * Define security requirements for disaster recovery and business continuity plans; support testing and validation in partnership with the Network Security Engineer ## Related Videos - [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)