IT Security Analyst - Network Security

The IT Security Analyst - Network Security supports the Bank by implementing, monitoring, and continuously improving network security controls that protect the confidentiality, integrity, and availability of Bank systems and information assets.

This role is intended to align with the existing Information Security team structure while creating a distinct network-security specialty. The position complements Identity and Access Management responsibilities and Information Security responsibilities by serving as a hands-on technical resource for secure network architecture, Cisco technologies, network access control, infrastructure protection, security monitoring, threat response, and vulnerability remediation.

The successful candidate will work closely with their peers, front-line IT managed service providers (MSP), vendors, and business stakeholders to support secure network design, effective security operations, regulatory readiness, and the Bank’s Zero Trust security objectives.

Essential Duties and Responsibilities

Network Security Operations:

• Administer, monitor, and support enterprise network security infrastructure, including routing, switching, wireless, VPN, DNS security, secure remote access, and network segmentation controls.

• Configure and support Cisco technologies such as Catalyst switches, Meraki appliances, Cisco ISE, Cisco Umbrella, Cisco Secure Client / AnyConnect, and related network security platforms.

• Assist with secure design, implementation, and troubleshooting of LAN, WAN, WLAN, VLAN, VPN, routing, switching, firewall, and network access control environments.

• Monitor network and security events to identify anomalous activity, potential policy violations, suspicious traffic, and infrastructure risks.

• Support secure configuration standards, patching, lifecycle management, and hardening of network infrastructure.

• Support network segmentation, 802.1X authentication, NAC, conditional access, least privilege, and Zero Trust security initiatives.

• Assist with secure architecture reviews for on-premises, cloud, and hybrid infrastructure solutions.

• Partner with Identity and Access Management staff on authentication, authorization, and access governance controls that affect network access.

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field; equivalent work experience and relevant certifications may be considered.

• 3+ years of experience in network administration, network security, systems administration, infrastructure engineering, or information security operations.

• Hands-on experience supporting Cisco networking environments, including switching, routing, wireless, VPN, and network troubleshooting.

• Working knowledge of cybersecurity principles, secure configuration, vulnerability remediation, firewall concepts, identity/access controls, and incident response.

• Ability to document procedures, diagrams, actions taken, findings, and remediation activities clearly and accurately.

• Strong analytical, troubleshooting, prioritization, communication, and customer-service skills.

• Strong written and verbal communication with the ability to translate technical risk into business-relevant language.

• Ability to work independently, manage competing priorities, collaborate cross-functionally, and maintain a service-oriented approach.

Preferred Qualifications

• 5+ years of experience in network security, enterprise networking, cybersecurity operations, or regulated financial services technology environments.

• Experience with banking, financial services, healthcare, or other regulated environments.

• Experience supporting Cisco Meraki, Cisco Catalyst, Cisco ISE, Cisco Umbrella, Cisco Secure Firewall, Cisco Secure Client / AnyConnect, Cisco Duo, or related Cisco security solutions.

• Enterprise routing and switching; VLAN design; Layer 2/Layer 3 troubleshooting; STP; OSPF, EIGRP, and BGP fundamentals; DNS, DHCP, NAT, QoS, VPN, and wireless security.

• Cisco Catalyst, Cisco Meraki, Cisco ISE, Cisco Umbrella, Cisco Secure Firewall / Firepower, Cisco Secure Client / AnyConnect, Cisco Duo, Cisco wireless, and network monitoring tools.

• Network segmentation, micro-segmentation, 802.1X, NAC, dynamic VLAN assignment, secure remote access, secure vendor connectivity, and Zero Trust network architecture.

• Preferred industry certifications should demonstrate practical networking, Cisco platform, and security operations competency; candidates are not expected to hold every certification, but should hold or be willing to pursue role-relevant credentials, such as Cisco Certified Network Associate (CCNA) or complementary certifications such as CompTIA Network+, CompTIA Security+, CISSP, or SANS GIAC.

Pulled from the full job description

• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance
• Flexible spending account

• Life insurance, * Full-time position with periodic after-hours maintenance, implementation windows, incident response, and on-call support as business needs require.

• May require lifting, installing, or moving IT/network equipment up to 50 pounds.

• Hybrid, on-site, or multi-location support may be required based on business and operational needs.

Benefits

• 401(k)

• 401(k) matching

• Dental Insurance

• Flexible Spending Accounts

• Health Insurance

• Vision Insurance

• Life Insurance

• Paid Time Off

The statements herein are intended to describe the general nature and level of work being performed but are not to be seen as a complete list of responsibilities, duties, and skills required of personnel so classified. Also, they do not establish a contract for employment and are subject to change at the discretion of the employer.

Legacy Bank and Trust is an equal opportunity employer.