Sr Info Security Analyst

The Sr. Information Security Analyst designs, configures, administers, and monitors information security controls for the Bank. This position assists the CISO with risk assessment activities, selecting and implementing security controls, and documenting the results of their activities while executing the Information Security Program. The Sr. Information Security Analyst assists with incident response and may require after-hours support if there are production issues with security controls., * Responsible for the selection, design, configuration, administration, and monitoring of security controls, including maintaining reliability, performance, and availability of the systems.

• Contributes to IT and Information Security risk assessment documentation using an understanding of IT and Information Security risks and controls.
• Participates in research and development of security technologies that will assess/monitor/reduce vulnerabilities for the enterprise.
• Responsible for automating security activities and data analysis via system automation scripting and data management (Python, PowerShell).
• Responsible for documenting work activities in activity logs, periodic reports, problem management systems, change management systems, project tracking systems, and other similar systems.
• Responsible for documenting system design and configuration information.
• Documentation must be factually accurate and conform to business writing standards with minimal spelling, grammatical, or syntactical errors.
• Responsible for following Change Management procedures and minimize disruption to production systems by exercising good judgment and due care.
• Automating security activities and data analysis via system automation scripting and data management (Python, PERL, PowerShell)
• Security-related MS SQL database administration, When scheduled for on-call duty, responsible for all end-user support after hours, and ensuring that response times and service levels are within the guidelines established by management. Bank Security personnel must ensure that cell phones are on and available in the event of end-user support call or outage alert via text message. Bank Security personnel may be expected to be available to respond to critical situations, even if not scheduled for on-call duty., The required absence will be scheduled in coordination with management to ensure continuity of operations. Administration of absence, including paid or unpaid status, will comply with all applicable federal, state, and local wage and hour and leave laws, including California requirements., For qualified positions, the Bank may designate an Officer Title based on the role’s job level, scope of responsibility, and alignment with established competency frameworks. Eligibility for an Officer Title designation is contingent upon the employee meeting defined competency, performance, and experience requirements and is governed by applicable Bank policies, governance standards, and required approval processes.
• This position is not eligible for an Officer Title., This job description is intended to describe the general nature and level of work being performed and is not intended to be an exhaustive list of all duties, responsibilities, or qualifications. Employees may be required to perform other duties as assigned, consistent with business needs and applicable law.

• Understanding of information security concepts and domains.
• Experience administering Windows and Linux servers or network systems (Arista, Cisco, HP).
• Understanding and/or experience with the following security technologies, firewalls (Fortinet), web application firewalls, IDS/IPS, e-mail encryption gateways, vulnerability scanning tools, forensics tools.
• Exposure to log/packet capturing & decoding of various attack signatures, such as recognizing SQL injections, cross-site scripting attacks, etc.
• Experience collaborating with vendors to implement security-related projects.
• Strong understanding of Microsoft Active Directory access rights, user access provisioning, SQL access and Operating System security.
• Working knowledge of Microsoft Azure, M365 cloud security, and InTune.
• Exposure to log/packet capturing & decoding of various attack signatures, such as recognizing SQL injections, cross-site scripting attacks, etc.
• Ethernet, TCP/IP, DHCP, DNS, Active Directory and enterprise level backup software.
• Experience with SIEM systems such as SumoLogic or Splunk.

Basic Knowledge, Skills and Abilities

• Effective verbal and written communications, including documenting activities, drafting reports, and presentation skills for findings and recommendations.
• Clear understanding of the English language (spoken and written)
• Customer service skills
• Time management skills
• Project planning and execution skills
• Detail-oriented
• Critical thinking, judgment and problem-solving skills
• Ability to actively listen and learn.
• Ability to work both independently and with others at all levels.
• Ability to communicate with Supervisors and Co-workers respectfully
• Ability to effectively deal with unpleasant, angry or discourteous people

Equipment Operated

• Operates standard electronic computers and customary office equipment required to perform essential job functions.
• Use of equipment is required, with or without reasonable accommodation, in accordance with the Americans with Disabilities Act (ADA) and the California Fair Employment and Housing Act (FEHA).

Physical Requirements & Work Environment

The physical demands and work environment characteristics described below are representative of those that must be met by an employee to successfully perform the essential functions of this position. Nothing in this description is intended to limit the availability of reasonable accommodation under applicable law.

• Ability to perform repetitive movements associated with office and computer-based work.
• Ability to sit and or stand for extended periods of time to perform essential job functions.
• Ability to lift, carry, or move objects weighing up to 25 pounds, with or without reasonable accommodation.
• Ability to use hands and fingers to manage, manipulate, or feel objects and operate standard office equipment.
• Work is primarily performed in an office environment with a controlled temperature and standard office conditions.

Education and Experience

• Minimum of six years of applicable security and system administration experience
• Bachelors in computer science or equivalent required. Security Certifications preferred from GIAC, ISC2, CompTIA such as CISSP, SSCP, CCSP, GCIH, CEH, etc.
• Microsoft Cloud Certifications such as Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Cybersecurity Architect Expert
• Penetration Test experience, The listed range represents the full compensation range for this position. Placement within the range will be determined based on factors including skills, relevant experience, job-related qualifications, geographic location, and internal equity, in accordance with Bank compensation policies.

• Exempt Salary Range: $102,440 - $174,200 per year