Senior Cyber Security Analyst

Serving as both a security professional for our corporate and our public cloud environments that host our financial services platforms, at Lumin Digital, a Cyber Security Analyst is responsible for:

* Monitoring and evaluating threats to a cloud-hosted digital banking solution

* Assessing applications, networks, and systems to identify vulnerabilities

* Operating, supporting, and monitoring technical controls to protect people and sensitive data

* Following industry-standard practices to prepare for, identify, contain, eradicate, and recover from security incidents

* Supporting risk management, compliance, and audit functions to measure and continuously improve the information assurance of environments

* Use and optimize monitoring, reporting, and alerting capabilities to identify, prioritize, and address threats by using research, database queries, data manipulation, and reporting writing technical skills.

* Maintain and refine threat models to inform and prioritize the risk management activities of the security team.

* Use and maintain vulnerability scanning and penetration testing tools to quickly identify weaknesses across multiple environments and systems at scale.

* Collaborate with clients, auditors, vendors, and the internal security team to validate the security posture of multiple layers of environments, from low-level physical to high-level application layers.

* Investigate reported vulnerabilities and risks to qualify and confirm findings and follow established procedures to resolve directly on their own or to assign remediation actions to other functional areas.

* Use strategies, scripts, configurations, or other manual procedures to reduce security risks across cloud services, servers, network devices, and end-user endpoints.

* Operate security solutions, including firewalls, DLP tools, CASB’s, and AV/EDR systems, to maintain and improve configurations and policies that reduce security risks.

* Participate in formalized security incident response procedures as part of a team, including all phases of the incident handling lifecycle, from preparation through lessons learned.

* Collect evidence of security program activities to satisfy client due diligence requests as well as support internal and external audit activities.

Education:

* Associate Degree in Computer Science, Management Information Systems, Information Assurance, Information Security, Cybersecurity, or related field; or, equivalent self-study in cybersecurity with demonstrated command of key concepts and technologies and proficiency in digital forensics, incident response, secure application development, penetration testing, or other technical security risk management domains required.

Experience:

* Ten (10) years of experience in any relevant technology domain, including software engineering, information technology, systems administration, technical fieldwork, or information assurance required.

* Six (6) years of demonstrated experience in identifying threats, finding, confirming, and managing vulnerabilities in a team environment in a full-time capacity as an operations analyst, security analyst, DevSecOps team member, or similar role required; or, practical certifications or demonstrated accomplishments in cyber range / CTF competitions that show ability and experience in identifying and handling security risks relevant to protecting a hosted digital banking environment required.

* Experience with AWS, Linux, Git, log aggregation platforms, issue tracking systems, and coding in Bash, Node.js, Python, or Ruby desired.

Knowledge, Skills, and Abilities:

* In-depth technical knowledge of cybersecurity tools, techniques, and procedures to identify and analyze threats and devise and monitor technology safeguards to protect sensitive assets

* Calm and serious attitude, technical aptitude, appropriate sense of urgency, and communication skills to effectively coordinate with internal team members to remediate vulnerabilities and reduce security risks

* Must be able to pass required background checks to be accepted as an employee with access to sensitive information

* Must have strong client orientation and demonstrate professional demeanor that earns the trust and respect of individuals inside and outside Lumin Digital

* Ability to prioritize tasks, exercise sound judgment and confidentiality with sensitive information

* Ability to follow and update incident response playbooks and other procedures to ensure a consistent quality response to alerts and reported incidents

* Good communication, interpersonal, and presentation skills

* Ability to work remotely while maintaining a high level of productivity and effectiveness with little to no supervision

* Strong drive to fully understand threats and weaknesses, to continuously improve our posture, and to professionally develop in this quickly-changing career

While performing the duties of this Job, the employee is regularly required to sit; use hands to finger, handle, or feel and talk or hear

Specific vision abilities required by this job include close vision

Ability to occasionally lift/move up to 25 pounds

Individuals with a disability who are otherwise able to perform the essential functions of the job may request a reasonable accommodation through the Human Resources department.

California Employee privacy notice