Protecting the company's members, systems, and data is the primary purpose of this hands-on Cybersecurity Analyst role. This individual contributor will manage daily security operations across endpoint, network, and cloud environments, including vulnerability and patch management, and the hardening of Microsoft 365 and Azure. The position suits a candidate with a strong infrastructure background and practical security experience who thrives in a fast-paced financial services environment with regulatory and audit requirements.
Responsibilities
Administer, tune, and monitor the organization's security stack (e.g., Cato SASE and/or CrowdStrike EDR/XDR), responding to alerts, investigating incidents, and driving remediation
Lead the vulnerability management lifecycle, including scanning, triaging, prioritizing, and tracking remediation of vulnerabilities across servers, endpoints, and cloud workloads
Own and improve the patch management program, ensuring operating systems, applications, and infrastructure are consistently updated and compliant
Harden and secure Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID) using secure baselines, conditional access, and MFA
Administer and mature Microsoft Purview capabilities, including Data Loss Prevention (DLP), sensitivity labels, retention policies, audit logging, eDiscovery support, insider risk signals, and compliance evidence collection to protect member and organizational data
Manage Microsoft Intune endpoint security responsibilities, including device compliance policies, configuration profiles, security baselines, device enrollment, conditional access integration, and remediation of non-compliant endpoints
Configure, monitor, and secure Microsoft Azure resources, applying cloud security best practices, identity governance, and least-privilege access
Apply and enforce security best practices including network segmentation, endpoint protection, logging, monitoring, and configuration management
Administer and maintain firewall policies, including rule reviews, segmentation controls, VPN/security access, logging, and coordination of network security changes
Develop, review, and enforce Group Policy settings to support secure workstation and server configurations, hardening standards, and consistent endpoint controls
Manage email security controls, including phishing protection, attachment and URL defense, quarantine review, policy tuning, and investigation of suspicious messages
Coordinate security awareness training and phishing simulation activities, including user education, campaign support, reporting, and follow-up guidance for employees
Leverage APIs and base scripting in PowerShell, Bash, and Python to automate security operations, integrate tooling, extract and correlate data, and streamline repetitive tasks across on-premises and cloud environments
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Support security audits, examinations, and assessments by gathering evidence, documenting controls, and helping remediate findings for regulatory and audit bodies
Contribute to security policies, standards, and procedures, and promote security awareness across the organization
Assist with incident response activities, including detection, containment, eradication, recovery, and post-incident reporting
Collaborate with infrastructure and application teams to embed security into projects, migrations, and new technology rollouts
Enforce compliance with all federal and state laws and regulations, including the Bank Secrecy Act (BSA), Patriot Act, and Office of Foreign Asset Controls (OFAC) requirements, and request legal interpretation as necessary to identify compliance concerns
Adhere to applicable federal and state laws, regulations, and internal compliance with standard policies relevant to their roles and responsibilities
Perform other duties as assigned
Requirements
5+ years of experience in an infrastructure or security role, with a heavy infrastructure background (servers, networking, endpoints, identity)
Hands-on experience with a modern security stack such as Cato Networks (SASE/SSE) or CrowdStrike (EDR/XDR)
Base scripting proficiency in PowerShell, Bash, and Python for automation, data parsing, and security tooling
Demonstrated experience with vulnerability management and patch management programs and tooling
Working knowledge of Microsoft 365 administration and security hardening
Hands-on experience securing and administering Microsoft Azure
Solid understanding of security best practices, frameworks, and controls across on-premises and cloud environments
Strong analytical, documentation, and communication skills with the ability to work independently as an individual contributor
Infrastructure and cloud security across on-premises, Microsoft 365, and Azure environments
Vulnerability and patch management, including scanning, prioritization, and remediation tracking
Endpoint and network defense, including EDR/XDR, SASE/SSE, firewall, and segmentation controls
Microsoft security tooling, including Purview (DLP, sensitivity labels), Intune, and Entra ID
SIEM administration, log monitoring, and correlation to support detection and incident response
Detail-oriented and self-directed, with a strong audit and compliance mindset
Clear documentation and communication skills across technical and non-technical audiences
Represents FPCU with professionalism and purpose, communicating with members through respectful and solution-focused verbal and written communications that support a member-focused experience
Engages in effective interpersonal communication, diplomacy, and collaboration skills to develop productive relationships, encourage cooperation, and support positive member and employee experiences
Maintains compliance with all applicable policies, demonstrating integrity, respect, and accountability while handling sensitive information and complying with FPCU policies, regulatory expectations, and confidentiality requirements
Ability to apply logistical reasoning, analytical skills, and professional judgment to define and solve problems with effective and compliant solutions
Adaptable, resilient, and comfortable navigating change in a fast-moving environment
Embraces innovation and continuously seeks better ways to serve members and support teams
Sedentary work; sitting most of the time. May occasionally exert up to 50+ pounds of force
The noise level in the work environment is professional and typically moderate
Nice to have:
Experience in financial services and familiarity with related audit and regulatory bodies (e.g., NCUA, state examiners, external auditors)
Experience securing artificial intelligence (AI) tools, services, and data, including responsible AI usage and governance
Experience assessing risk and creating qualitative and quantitative risk assessments to evaluate and prioritize security exposures
Additional certifications such as Microsoft SC-200/AZ-500, CrowdStrike, or Cato administration credentials
Important Details
Schedule: 40 hours per week, salary exempt
Hours: flexible and variable, including holidays, evenings, or weekends
About the Company
Financial Plus Credit Union (FPCU) empowers people and communities to strive for more through knowledge, innovation, and service. It is a purpose-driven organization grounded in five values: represent with purpose, empower through knowledge, appreciate and accept, champion new possibilities, and help make things easier. FPCU is a team of high performers who care deeply, support each other, work hard, and continuously push forward.
Welcome to Financial Plus Credit Union (FPCU)- The Place that brings Dreams within Reach.
At FPCU, our mission is simple but powerful: Empowering people and communities to strive for more through knowledge, innovation, and service that brings dreams within reach.
