Info Security Analyst Senior

Company: USAA
Location: San Antonio
Posted on: January 15, 2021

Job Description:

Job DescriptionInfo Security Analyst Senior USAA has an Info Security Analyst l position that offers the opportunity to work from home. This position defines, develops, and provides governance of the vulnerability management program, to include establishing vulnerability risk ratings Investigates, analyzes, and responds to suspicious behavior, attacks, and security breaches within USAA's environments using a variety of cyber defense tools to identify and mitigate threats. Conducts vulnerability, security configuration, and/or penetration testing assessments of systems and networks and develops and implements solutions for addressing vulnerabilities, threats, and exploits. Stays current with latest information security threats, exploits, trends, and intelligence. Job Requirements About USAA USAA knows what it means to serve. We facilitate the financial security of millions of U.S. military members and their families. This singular mission requires a dedication to innovative thinking at every level. In each of the past five years, we've been a top-40 Fortune 100 Best Companies to Work For--, and we've ranked among Victory Media's Top 10 Military Friendly-- Employers 13 years straight. We embrace a robust veteran workforce and encourage veterans and veteran spouses to apply. USAA Careers - Award Winning Workplace (17 seconds) USAA Careers - World Class Benefits (31 seconds) * Maintains awareness of the latest critical information security vulnerabilities, threats, and exploits. * Assists in conducting routine vulnerability, security configuration, and/or penetration testing assessments. * Monitors networks, systems, and applications for routine to moderately complex suspicious behavior (includes Insider Threat), attacks, and security breaches. * Assists in responding to cyber incidents, performing moderately complex analysis using security tools. Builds knowledge, understanding, and experience of disparate skills (e.g. networking, servers, coding, etc.) to figure out the malicious actor's tactics, techniques and procedures. * Assists with conducting routine forensic analysis of comprised systems and determination of consequences. * Under direct supervision, uses the discoveries from the incident response process to make basic improvements to the existing detection capabilities and security controls. * Documents findings of completed alerts. Assists with writing up findings on incidents. * Serves as a resource to less experienced team members on escalated issues of a routine nature. Additional Job Description: * Identify improvement opportunities in vulnerability management processes and manage program requirements * Drive development of a relevant risk priority algorithm that considers risk factors in arriving at a vulnerability risk rating * Define processes, metrics, and dashboards related to vulnerability management at an enterprise level * Track vulnerability program status, and lead vulnerability management program initiatives * Drive compliance with vulnerability management standards and program improvements by stakeholders * Communicate and escalate vulnerability risk to management Minimum Experience: * Bachelor's Degree, OR, 4 additional years of related experience beyond the minimum required may be substituted in lieu of a degree. * 2 or more years of related experience in Information Security and/or Information Technology to include accountability for moderately complex tasks and/or projects. * Developing knowledge of function/discipline and demonstrated application of knowledge, skills and abilities towards work products. * Developing level of business acumen in the areas of business operations, industry practices and emerging trends. *Qualifications may warrant placement in a different job level* When you apply for this position, you will be required to answer some initial questions. This will take approximately 5 minutes. Once you begin the questions you will not be able to finish them at a later time and you will not be able to change your responses. Preferred Experience: * Three years directly engaged in any of the following activities related to software or infrastructure vulnerabilities at an enterprise level: audit, discovery, assessment, intelligence, metric or standard development, status or risk reporting, or escalation * Demonstrated continuous dedicated experience collaborating with either information security or information technology teams responsible for vulnerability identification, mitigation, and remediation * Meaningful experience defining risk priority for vulnerabilities, or applying mathematical methods or models to determining risk ratings * Proficiency in wiki and dashboard development * Proficiency in process definition, development, and documentation Compensation: USAA has an effective process for assessing market data and establishing ranges to ensure we remain competitive. You are paid within the salary range based on your experience and market position. The salary range for this position

Keywords: USAA, San Antonio , Info Security Analyst Senior, Professions , San Antonio, Texas