Information Security Analyst (SIEM) - Cyber Defense Professionals

Job Expired

About the job

People Drive Our Success

Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank – we strive to provide a caring culture that supports your aspirations and success. We believe people are our most valuable asset and we proudly foster growth and development empowering you to achieve your professional goals. We have thrived for 60 years and persevered through many economic cycles due to our team members’ drive and optimism. Together we can make a difference in the financial future of our communities.

Apply today!

What Our Team Members Are Saying

Video Clip 1

Video Clip 2

Video Clip 3

Learn more about us at cathaybank.com

General Summary

This position is responsible for ensuring that the Bank’s security operations are managed and maintained in accordance with established Information Security policies, published regulations and industry best practices. Primarily responsible for the administration, operations and maintenance of the Security Information and Event Management (SIEM) solution and other security tools. This position supports incident response activities and log data analysis to secure the information and systems, including but not limited to: Microsoft Windows Active Directory, financial business applications, network and communications security monitoring, endpoint security tools and data loss prevention tools.

Essential Functions

Tunes SIEM and other security tools to reduce false positives. Assesses and addresses current gaps. Identifies improvements and creates plans towards maturity.
Administers configuration of SIEM and other security tools as required by the Security Operation Center.
Adapts and develops new analysis in response to emerging threats and intelligences.
Supports incident response activities. Analyzes security events, incidents, logs data analysis to secure the information and systems, including but not limited to: Microsoft Windows Active Directory, financial business applications, network and communications security monitoring, endpoint security tools and data loss prevention tools.
Ensures compliance with published baseline configuration standards and recommends enhancements as required.
Ensures the appropriate installation, maintenance and monitoring of approved rules for preventive security solutions including antimalware, security gateways, firewalls and SIEM solutions.
Assists in security assessment and vulnerability assessment remediation efforts. Participates in developing corrective actions based on the assessment’s findings and identified vulnerabilities.
Works closely with vendors to troubleshoot and to enhance the current security toolsets to their optimal potential.
Gathers performance and compliance data/metrics from IS and IT sources.
Interacts with managed security services operations.

Qualifications

- Education:College degree in Information Technology or Business Administration, or equivalent work experience. Information Security and SIEM related trainings preferred. Security+, SSCP or CISSP certifications preferred.
- Experience:
  - 2-3 years experience in Security Operations, and Security Information and Event Management (SIEM) solutions.
  - Working knowledge on operating and monitoring network and endpoint security solutions.
  - Understanding of industry security frameworks such as NIST CSF, CIS and OWASP.
  - Experience with Threat Intelligence platforms and Cloud Security tools preferred.
  - Experience with Regex and custom scripting preferred.
  - Experience with SIEM administration, configuration, tuning preferred.
  - Skills/Ability:
    - Excellent communication and problem-solving skills.
    - Strong Inter-personal communication and collaboration skills.
    - Self-starter and open for learning opportunities. Ability to train and mentor colleagues with less experience.