IT Information Security Analyst

Position Summary:
The Information Security Team's primary role is to protect the confidentiality, integrity, and availability of Alerus systems and data. The Information Security Analyst must be familiar with enterprise information security controls. In addition, the Information Security Analyst role will be an active defender, threat hunter, and incident responder. This individual must be able to work well within a team environment and independently while being curious about how things work, organized, self-motivated, goal oriented and skilled at prioritizing and multitasking.

Essential Responsibilities:
Job Function 1: Customer Support - 50%

• Provide level I information security operations support.
• Support endpoint protection, email security, and internet content filter systems.
• Deliver timely responses to malware alerts, reported mail abuse or phishing campaigns, and exception requests to internet content filter policy.
• Facilitate incident response processes.
• Assist other departments as necessary with the implementation of information security systems and controls.
• Participate in on-call rotation for after-hours support.

Job Function 2: Security Services - 40%

• Assist with ensuring software and controls are working properly, perform validation of controls, test version upgrades to ensure existing and new features perform as expected for both on network and cloud-based systems.
• Lead quarterly social engineering testing and scheduling.
• Assist with threat hunting processes across organization's systems and networks.
• Assist with adversarial emulation testing to test defenses to make sure controls are working appropriately to improve program knowledge.
• Maintain knowledge of current cyber security threats. Advise the Director of Information Security if threats may impact the company's systems.

Job Function 3: Project and Vendor Management - 10%

• Act as project resource for IT/Corporate projects.
• Maintain company relationship with vendors and professional consultants.
• Assist blue team during penetration testing engagements.
• Monitor service providers for compliance with information security policies.

Position Requirements:
Qualifications:

• Completion of a 2-year IT/Technical degree in information security or a related field or equivalent professional experience preferred.
• Completion of an information security course or certification preferred.
• Knowledge of Windows Desktop Operating Systems.
• Familiar with endpoint security solutions and vulnerability management processes.
• Familiar with social engineering and common email phishing techniques.
• Knowledge of identity and access management, intrusion detection, forensics, incident response, threat hunting, risk management, and auditing on premise solutions and cloud solutions.
• Flexibility with schedule as needed.

Personal Characteristics:

• Adaptable, flexible, organized, able to multi-task, and work independently within a fast-paced organization.
• Curious about how things work.
• Comfortable interacting with various levels of management within the organization.
• Effective written and oral communication.
• Excellent interpersonal skills.
• High level of self-motivation and a keen attention to detail.
• Analytical ability to determine appropriate actions and meet deadlines.
• Ability to work in a collaborative team environment.
• Customer service focused, passionate about helping others.

Physical Demands - Must be met with or without a reasonable accommodation:

• Extended periods of time sitting at a desk and using office equipment.
• Ability to operate a personal computer/laptop for approximately 8 hours per day.
• Extended time is spent reviewing physical and electronic documents.
• The employee is occasionally required to stand, walk, reach with arms and hands, climb or balance, and to stoop, kneel, crouch or crawl. Vision abilities required by this job include close vision.
• Periodically, may also do light lifting of supplies and materials which weighs in at approximately 20 lbs.
• Will spend most of time in an indoor environment.

Alerus Financial is an Equal Opportunity Employer of women, minorities, protected veterans and individuals with disabilities.