Security Analyst II.

This is an individual contributor position for someone who enjoys solving complex problems, taking ownership, and turning security findings into practical improvements. What You’ll Do

• Partner with our managed Security Operations Center (SOC) to investigate alerts, validate threats, improve detection, and coordinate incident response.
• Support incident investigation, containment, remediation, recovery, documentation, and post-incident follow-up.
• Coordinate vulnerability scanning, prioritize findings, and work with system and application owners to track and validate remediation.
• Administer and enhance Microsoft security tools, including Defender, Entra ID, Purview, Data Loss Prevention (DLP), and Insider Risk Management.
• Strengthen identity, access, endpoint, network, cloud, and SaaS security controls.
• Support security assessments, penetration tests, audits, regulatory examinations, and risk reviews.
• Evaluate security risks associated with third-party technology, Artificial Intelligence, and Agentic AI, and recommend safeguards.
• Develop security procedures, incident response playbooks, technical documentation, and operational reporting.
• Lead assigned cybersecurity initiatives and support security awareness and phishing simulation programs.
• Stay informed about emerging threats and recommend improvements that strengthen our security and resilience.

• At least four years of progressive cybersecurity or information security experience.
• Hands-on experience investigating security alerts, supporting incident response, and working with a SOC or managed security provider.
• Experience with vulnerability management, remediation tracking, security assessments, and risk identification.
• Experience administering or supporting enterprise security platforms, such as Microsoft Defender, Entra ID, Purview, DLP, identity security, SIEM, or endpoint detection and response (EDR) tools.
• Strong knowledge of endpoint, network, identity, cloud, and data security, with working knowledge of MITRE ATT&CK, threat hunting, and detection concepts.
• Strong analytical, communication, documentation, and problem-solving skills.
• Ability to work independently, manage competing priorities, collaborate across teams, and escalate security risks appropriately., * A bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field. An equivalent combination of relevant education, certifications, and cybersecurity experience may be considered.
• Experience with network, cloud, infrastructure, or IT operations environments.
• Experience supporting audits, regulatory examinations, compliance activities, or third-party security reviews.
• Experience in financial services, banking, credit unions, or another regulated industry.
• Relevant cybersecurity, digital forensics, incident response, or penetration testing training and certifications, such as CISSP or GIAC. Certifications are preferred, but not required.

At Community Choice Credit Union, we believe in helping our neighbors achieve the life they desire. Every team member plays a key role in making that purpose a reality by providing outstanding service to both internal and external members while living out our core values: Committed, Charitable, Credible, and United.