Info Security Analyst - Intermediate Level

$74,210 - $141,830/Yr

USAA - San Antonio, TX

Full-time - Mid Level

San Antonio, TX

Credit Intermediation and Related Activities

About the position

The Information Security Analyst position at USAA is focused on safeguarding the organization against cybersecurity threats, particularly those originating from within the environment. The role is part of the Cyber Threat Operations Center (CTOC) and involves managing the Data Loss Prevention (DLP) program, collaborating with data management partners, and supporting incident response efforts. The analyst will utilize various cyber defense tools to detect, analyze, and respond to threats, while maintaining awareness of the latest security vulnerabilities and exploits.

Responsibilities

• Maintain awareness of the latest critical information security vulnerabilities, threats, and exploits.
• Conduct routine vulnerability management, security configuration assessments, and penetration testing operations.
• Monitor internal and external networks, systems, and applications for security anomalies and events.
• Assist in responding to cyber incidents and perform moderately complex analysis using security tools.
• Build knowledge and experience to determine a malicious actor's tactics, techniques, and procedures.
• Use discoveries from the incident response process to improve detection capabilities and security controls.
• Document findings of completed alerts and assist with incident documentation.
• Serve as a resource to team members on escalated issues of a routine nature.
• Ensure risks associated with business activities are effectively identified, measured, monitored, and controlled.

Requirements

• Bachelor's degree; OR 4 years of related experience may be substituted in lieu of degree.
• 2 years of related experience in Information Security, Cybersecurity, and/or Information Technology with a security focus.
• 1 year of related experience in Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, or Software Development Security.
• Developing level of business insight in business operations, risk management, industry practices, and emerging trends.

Nice-to-haves

• Understanding of data loss prevention, cloud access security broker, sensitive database monitoring, and SIEM tools.
• Experience using the Symantec Data Loss Prevention platform.
• Understanding of the MITRE ATT&CK framework.
• Experience with enterprise logging technologies such as ELK or Splunk.
• Experience with scripting languages such as Python or PowerShell.
• Cybersecurity operations and incident response experience.
• Experience communicating technical issues to non-technical audiences.
• CISSP, SANS, or other Information Security certifications.

Benefits

• Comprehensive medical, dental, and vision plans
• 401(k)
• Pension
• Life insurance
• Parental benefits
• Adoption assistance
• Paid time off program with paid holidays
• 16 paid volunteer hours
• Various wellness programs
• Career path planning and continuing education assistance