Bachelor's degree in computer science, information security, business administration, or similar; relative years of work experience can be substituted for a bachelor's degree
2 or more years of related work experience in vendor management, risk management, or related roles
Basic proficiency in scripting languages such as Python or PowerShell
Experience with SIEMs, firewalls, email security, vulnerability management, IDS/IPS, and cloud technologies
Security+, SSCP, GIAC, or similar industry certifications
Prior experience working in a regulated environment
Skills and Abilities:
Ability to manage multiple tasks and work in a fast-paced environment
Cyber security investigation, research, and troubleshooting
Understanding of data privacy and security concepts
Proficiency in Microsoft Office, particularly Excel, Word, and PowerPoint
Adaptability to changing priorities and deadlines
Analytical, critical thinking, and problem-solving skill with attention to detail
Ability to work independently and collaboratively in a team environment
____________________
Benefits
Vision insurance
Additional Information
Live here. Play here. Bank here. Work here.
If you're looking to build your career at a forward-thinking organization with deep community roots and a vision for growth, success, and giving back, you've come to the right place.
Get to know us:
We're your local community bank-and have been since 1875-that is committed to providing excellent customer service and giving back to our communities.
We foster a collaborative, inclusive work environment as part of a close-knit team where your voice is valued and heard.
Our highly engaged employees are rewarded for their performance and have ample opportunities for cross-training and advancement within the organization .
We've been named one of the best places to work in Maine , and offer robust benefits focused on your holistic well-being.
______________________________________________________________________________________________________________
Position Summary:
The Information Security Analyst I is a key contributor within our information security team, responsible for monitoring, analyzing, and responding to security threats across digital and physical domains using cutting-edge tools and technologies. Key responsibilities include daily threat intelligence monitoring, vulnerability management support, email security analysis, and physical security device monitoring. This position collaborates closely with information security team members, IT, and physical security departments to maintain a robust security posture and ensure compliance with industry regulations. The Information Security Analyst I role requires a strong foundation in cybersecurity principles, keen attention to detail, and a desire to continuously learn and adapt to the evolving threat landscape in the banking sector.
Essential Duties and Responsibilities:
Monitor and analyze daily threat intelligence feeds and alerts using threat intelligence tools, identifying potential threats and escalating as necessary.
Conduct regular threat hunting activities using threat intelligence tools, focusing on indicators of compromise (IOCs) and suspicious behaviors.
Assist in vulnerability management processes, including reviewing scan results and supporting remediation efforts.
Support the development and updating of threat intelligence playbooks, ensuring alignment with the NIST Cybersecurity Framework.
Assist in analyzing security incidents related to threat management, email security, endpoint security, network security, and physical security devices, providing reports and improvement suggestions.
Prepare and distribute weekly threat intelligence reports, summarizing trends, potential risks, and mitigation recommendations.
Participate in threat simulation, incident response, and red team exercises to test and improve the bank's detection and response capabilities.
Assist in quarterly vulnerability assessments, providing actionable recommendations for risk mitigation.
Assist in firewall management and reviews to ensure proper configurations and functionality.
Support email security monitoring activities, investigating potential phishing or malware incidents using email security platforms.
Collaborate with the physical security team to ensure the security and proper maintenance of physical security devices.
Contribute to the monthly review and update of physical security device configurations, ensuring compliance with security policies and guidelines.
Camdennational · Remote