Information Security Analyst Senior

ECMC Group is a nonprofit corporation focused on helping students succeed. Headquartered in Minneapolis, ECMC Group and its family of companies provide financial tools and services, as well as funding for innovative programs to help students achieve their academic and professional goals.

Job Summary

The Cloud Security Analyst Senior is responsible for ensuring the security of our enterprise and cloud infrastructure. This role involves developing and implementing security measures, monitoring for potential security breaches, and responding to security incidents. The Cloud Security Analyst Senior will work closely with Senior IT and IT Security staff to ensure compliance with security policies and best practices. In addition, this role is responsible for monitoring and responding to security information events across multiple locations throughout the United States on a 24x7 basis, as needed.

This position is classified as hybrid and requires attendance on designated in-office days.

Essential Duties and Responsibilities

• Investigates and resolves level 2 information security events and escalates as needed to engineers for further triage.
• Designs, implements, and manages security measures for cloud-based systems.
• Conducts regular security assessments and audits.
• Collaborates with IT and development teams to ensure secure deployment of applications.
• Troubleshoots domain accounts, business application indentities and infrastructure system accounts through the entire lifecycle (creation, modification, deletion) throughout the enterprise.
• Responds to inquiries regarding logs and reports of domain controllers, business applications and infrastructure systems.
• Evaluates, tests, recommends, develops, coordinates, monitors, and maintains information security procedures, and systems.
• Assists and executes, in partnership with engineers, the configuration of correlation and workflow rule sets as needed to counter current and future information security threats.
• Assists with creating and maintaining department and enterprise security documentation including policies, standards, guidelines, procedures, designs and solution architectures.
• Investigates and resolves level one security incidents and escalates to engineers for further triage.
• Assists with resolution of request/fulfillment tickets for assigned security systems.
• Assists with tuning security systems so events and alarms provide optimal value.
• Participates in on-call rotation during business hours.
• Works with internal and external project managers to complete projects on time and leads or participates in IT projects to provide information security expertise, guidance, or training.
• Participates in compliance audits such as FISMA reviews, SOC audits, etc.
• Stays current on the latest cloud security threats, vulnerabilities, and trends.
• Performs other duties as assigned.

Required Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity or related field; or an additional 2 years of experience in lieu of degree
• 5+ years of experience in cloud security or related field
• Strong knowledge in Active Directory User Groups, Microsoft Exchange and service management systems
• Strong knowledge of cloud platforms (AWS, Azure, and Google Cloud)
• Strong experience with security tools and technologies (e.g. firewalls, intrusion detection)
• Must be able to work extended hours, including nights and weekends, to complete assignments, and provide 24/7 operations support when necessary

Preferred Qualifications

• Knowledge of student loan and/or financial services industry
• ISC2 SCCP, GIAC certifications, CompTIA Security+, AWS Associate of Solution Architecture, AWS Security Specialty Certification or similar certifications preferred

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The pay range for this position is $110,000-$120,000. Actual compensation may vary based on factors such as relevant experience, peer and market benchmarks, and geographic location.

ECMC Group is committed to ensuring our diverse, inclusive, and equitable culture is built on a strong sense of belonging, where everyone feels seen, heard, and encouraged to show up as their authentic self.

ECMC Group also provides a comprehensive benefits package:  

• Health & wellness benefits: Medical, dental, and vision insurance plan options, with a generous employer subsidy. Company paid life & disability insurance, pre-tax flexible spending accounts and robust wellness programs.
• Financial benefits: Generous 401(k) plan with a company match up to 6% and additional discretionary contribution potential, holiday time off, paid time off accrual starting at 20 days/year and commuter subsidy.
• Education benefits: Tuition reimbursement up to $10,500/year for approved programs and student loan payment reimbursement up to $4,800/year. Up to $5,250 of qualifying education benefits can be reimbursed pre-tax.