> Markdown version of [/jobs/ext/4550027-information-security-analyst-ii](https://www.wearedevelopers.com/jobs/ext/4550027-information-security-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst II - **Company:** Federal Home Loan Bank of Des Moines - **Location:** Des Moines, IA, United States - **Experience:** Experienced - **Salary:** $81,481.0 - $96,758.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Data Security, Linux, Digital Forensics, Information Technology Operations, Internet Security, Intrusion Detection and Prevention, Intrusion Detection Systems, Network Security, Azure Active Directory, Security Information and Event Management, Software Engineering, Software Vulnerability Management, EndPointSecurity, In-Plane Switching (IPS), Mitre Att&ck, Cyber Threat Analysis, Information Technology - **Published:** November 3, 2026 - **Apply:** https://www.careerbuilder.com/job-details/information-security-analyst-ii-des-moines-ia--71844dfc-8af3-4b3d-a89d-122936dd3107 ## About the Role Information/Data Security (InfoSec), Security Analysis, Federal Home Loan Banks, Internet Security, Security Analysis, Computer Security, Information/Data Security (InfoSec), Administrative Management, Security Information and Event Management (SIEM), Email Security, Required * 2-4 years of experience in Information Security, Security Operations Center (SOC), Cybersecurity, Information Technology, or a related technical discipline. * Experience investigating security alerts and responding to cybersecurity incidents. * Experience working with enterprise security technologies. * Working knowledge of one or more of the following: SIEM platforms, Endpoint Detection & Response (EDR/XDR), IDS/IPS, Email Security, Network Security Monitoring, Active Directory/Azure AD/Entra ID, Windows and Linux operating systems * Strong analytical and problem-solving abilities. * Ability to distinguish false positives from legitimate security events. * Understanding of the Cyber Kill Chain, MITRE ATT&CK Framework, or similar threat models. * Ability to assess risk and recommend appropriate remediation. * Excellent written and verbal communication skills. * Ability to prioritize multiple investigations simultaneously. * Strong attention to detail with excellent documentation skills. * Self-motivated with the ability to work independently and collaboratively. * Demonstrates curiosity, integrity, and a commitment to continuous learning. Preferred * Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience). * Security+, CySA+, GSEC, GCIA, GCIH, CISSP (Associate), or comparable certifications. * Experience with SOAR, threat intelligence platforms, cloud security, or digital forensics is preferred. ## Description At FHLB Des Moines, we work each day to develop an inclusive culture that supports and leverages the complexity of a diverse workforce. This enables us to effectively serve the needs of our members and help them succeed. The Information Security Analyst II is responsible for monitoring, analyzing, and responding to cybersecurity events while supporting the organization''s overall security operations. As a member of the Information Security team, perform threat detection, incident investigation, vulnerability management, and security administration activities to protect the confidentiality, integrity, and availability of organizational systems and data., * Monitor security alerts and events generated by SIEM, EDR, email security, cloud security, identity, network, and other security technologies. * Analyze security events to determine validity, impact, severity, and appropriate response. * Investigate suspicious activity and perform triage of security incidents, including containment and remediation efforts, by coordinating with internal technology teams * Escalate confirmed incidents according to established incident response procedures. * Participate in containment, eradication, recovery, and post-incident reviews. * Document investigations, findings, evidence, and remediation activities. * Perform threat hunting activities to identify malicious or abnormal behavior. * Correlate events across multiple security platforms to identify emerging threats. * Review indicators of compromise (IOCs) and indicators of attack (IOAs). * Monitor threat intelligence sources and recommend defensive improvements. * Identify trends in alerts and recommend tuning to reduce false positives. * Assist with vulnerability management activities including reviewing scan results, validating findings, and tracking remediation. * Maintain documentation, runbooks, and standard operating procedures; test security controls and validating operational readiness. * Partner with Infrastructure, Cloud, Networking, Application Development, Risk Management, and IT Operations to resolve security issues. * Provide recommendations to improve detection capabilities and operational processes; assist in developing and refining incident response playbooks. * Participate in security projects and implementation efforts. * Stay current on cybersecurity threats, vulnerabilities, attack techniques, and industry best practices. * Participate in incident response tabletop exercises to validate response procedures, identify gaps, and improve organizational preparedness. * Participate in an on-call incident response rotation to provide after-hours support for cybersecurity incidents and critical security events. * Support post-incident reviews by documenting lessons learned and recommending improvements to security controls, processes, and response procedures. * Perform initial forensic data collection to support security investigations. * Validate remediation activities following security incidents. * Support internal and external audits by providing evidence related to security operations. * Assist with onboarding new security tools and capabilities and perform routine administration of existing tools. * Other duties and projects as assigned.