Cybersecurity Analyst

Cybersecurity Analyst

Bellwether Community Credit Union | Full-Time | Non-Exempt

We’re looking for a Cybersecurity Analyst who enjoys getting hands-on with security tools, investigating potential threats, and finding practical ways to strengthen our defenses. This is an opportunity to take an active role in protecting our systems, our employees, and the members who trust us with their information.

We’re looking for someone who is technically curious, detail-oriented, and motivated to figure things out. You don’t need to know everything, but you should enjoy learning, take ownership of your work, and be comfortable collaborating with others to get things done.

What You'll Do

• Keep an eye on our security. Monitor and maintain security tools, investigate alerts, identify suspicious activity and help ensure our systems are properly protected.
• Dig into the details. Investigate security events, document findings, identify root causes, and support incident response when issues arise.
• Find and fix vulnerabilities. Manage vulnerability scanning, prioritize risks, coordinate remediation with IT teams, and follow issues through to resolution.
• Make security smarter and more efficient. Fine-tune alerts, improve detection rules, and use PowerShell, Python, or Bash to automate repetitive tasks and reporting.
• Turn data into insight. Maintain security dashboards and metrics that help us understand our security posture, identify trends, and focus on areas that need attention.
• Help us stay audit-ready. Test security controls, maintain accurate documentation, gather audit evidence, and support regulatory examinations and compliance requirements.
• Work across teams. Partner with IT and business teams to strengthen security practices, address risks, and keep our systems and processes running effectively.

What We're Looking For

• 1–3 years of experience in a dedicated cybersecurity role and 2–5 years of general IT experience.
• A recognized security certification, such as CompTIA Security+, GIAC/GSEC, or an equivalent credential.
• Working knowledge of security tools such as SIEM, endpoint protection/EDR, and vulnerability scanners.
• Scripting experience with PowerShell, Python, Bash, or similar tools, including automating manual or repetitive tasks.
• Strong Windows troubleshooting skills, along with a working understanding of networking fundamentals such as TCP/IP, DNS, DHCP, VLANs, and firewalls.
• Familiarity with security frameworks such as NIST CSF, CIS Controls, or MITRE ATT&CK.
• Strong attention to detail, organization, and follow-through, especially when tracking risks and remediation.
• The ability to communicate clearly, maintain thorough documentation, work independently, and collaborate with others.

You'll stand out if you also have:

• An associate's or bachelor's degree in cybersecurity, IT, or a related field, or equivalent experience.
• GIAC certifications such as GSEC, GCIH, or GCIA.
• Experience with regulatory or audit frameworks such as NIST, FFIEC, or PCI DSS.
• Experience working in financial services or another regulated industry.

A recognized security certification is required at hire. You'll also be expected to earn and maintain CompTIA Cybersecurity Analyst (CySA+) or a higher-level certification within your first six months.

BCCU Core Values

Exhibit and reflect the Credit Union’s core values of:

• People First
• Local Focus
• Always Learning
• Driven with Purpose
• Own Our Outcomes