Cybersecurity Analyst

Bellwether Community Credit Union is hiring a Cybersecurity Analyst to protect its systems, employees, and members’ information. The role monitors security tools, investigates threats and vulnerabilities, supports incident response and compliance, and works with IT and business teams to strengthen security practices.

What you'll do:

• Keep an eye on our security. Monitor and maintain security tools, investigate alerts, identify suspicious activity and help ensure our systems are properly protected
• Dig into the details. Investigate security events, document findings, identify root causes, and support incident response when issues arise
• Find and fix vulnerabilities. Manage vulnerability scanning, prioritize risks, coordinate remediation with IT teams, and follow issues through to resolution
• Make security smarter and more efficient. Fine-tune alerts, improve detection rules, and use PowerShell, Python, or Bash to automate repetitive tasks and reporting
• Turn data into insight. Maintain security dashboards and metrics that help us understand our security posture, identify trends, and focus on areas that need attention
• Help us stay audit-ready. Test security controls, maintain accurate documentation, gather audit evidence, and support regulatory examinations and compliance requirements
• Work across teams. Partner with IT and business teams to strengthen security practices, address risks, and keep our systems and processes running effectively

What they're looking for:

• 1–3 years of experience in a dedicated cybersecurity role and 2–5 years of general IT experience
• A recognized security certification, such as CompTIA Security+, GIAC/GSEC, or an equivalent credential
• Working knowledge of security tools such as SIEM, endpoint protection/EDR, and vulnerability scanners
• Scripting experience with PowerShell, Python, Bash, or similar tools, including automating manual or repetitive tasks
• Strong Windows troubleshooting skills, along with a working understanding of networking fundamentals such as TCP/IP, DNS, DHCP, VLANs, and firewalls
• Familiarity with security frameworks such as NIST CSF, CIS Controls, or MITRE ATT&CK
• Strong attention to detail, organization, and follow-through, especially when tracking risks and remediation
• The ability to communicate clearly, maintain thorough documentation, work independently, and collaborate with others
• A recognized security certification is required at hire
• An associate's or bachelor's degree in cybersecurity, IT, or a related field, or equivalent experience
• GIAC certifications such as GSEC, GCIH, or GCIA
• Experience with regulatory or audit frameworks such as NIST, FFIEC, or PCI DSS