Info Security Analyst - Intermediate Level

$74,210 - $141,830/Yr

USAA - San Antonio, TX

Full-time - Entry Level

San Antonio, TX

10,001+ employees

Credit Intermediation and Related Activities

About the position

The Information Security Analyst position at USAA is focused on safeguarding the organization against cybersecurity threats, particularly those originating from within the environment. The role is part of the Cyber Threat Operations Center (CTOC) and involves managing the Data Loss Prevention (DLP) program, collaborating with data management partners, and supporting incident response efforts. The analyst will utilize various cyber defense tools to detect, analyze, and respond to threats, ensuring the security of USAA's assets and compliance with risk management policies.

Responsibilities

• Maintains awareness of the latest critical information security vulnerabilities, threats, and exploits.
• Assists in conducting routine vulnerability management, security configuration assessments, and/or penetration testing operations.
• Monitors internal and external networks, systems, and applications for security anomalies and events.
• Assists in responding to cyber incidents, performing moderately complex analysis using security tools.
• Documents findings of completed alerts and assists with incident documentation.
• Serves as a resource to team members on escalated issues of a routine nature.
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled.

Requirements

• Bachelor's degree; OR 4 years of related experience may be substituted in lieu of degree.
• 2 years of related experience in Information Security, Cybersecurity and/or Information Technology with a security focus.
• 1 year of related experience in Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, or Software Development Security.
• Developing level of business insight in business operations, risk management, industry practices and emerging trends.

Nice-to-haves

• Understanding of data loss prevention, cloud access security broker, sensitive database monitoring, and SIEM tools.
• Experience using the Symantec Data Loss Prevention platform.
• Understanding of the MITRE ATT&CK framework.
• Understanding of the cyber threat landscape associated with insider threat detection, response, and mitigation.
• Experience with enterprise logging technologies such as ELK or Splunk.
• Experience with scripting languages such as Python or PowerShell.
• Cybersecurity operations and incident response experience.
• Experience communicating technical issues to non-technical audiences.
• CISSP, SANS, or other Information Security certifications.

Benefits

• Comprehensive medical, dental and vision plans
• 401(k)
• Pension
• Life insurance
• Parental benefits
• Adoption assistance
• Paid time off program with paid holidays plus 16 paid volunteer hours
• Various wellness programs
• Career path planning and continuing education assistance.