Why USAA? At USAA, our mission is to empower our
members to achieve financial security through highly competitive
products, exceptional service and trusted advice. We seek to be the
#1 choice for the military community and their families. Embrace a
fulfilling career at USAA, where our core values – honesty,
integrity, loyalty and service – define how we treat each other and
our members. Be part of what truly makes us special and impactful.
The Opportunity USAA Information Security Analysis & 3P Intel
is offering a unique opportunity for a Sr. Incident Handler focused
on third-party assessments, playing a vital role in the
enterprise's strategic initiatives. This position is central to
managing and protecting the organization's data assets through the
application of advanced technologies and involvement in high-impact
projects. The successful candidate will significantly contribute to
shaping 3P incident handling, bolstering data security, and driving
substantial operational cost optimizations. Ideal applicants are
seasoned professionals with a passion for incident handling,
holding a CISSP or CRISC certification, and possessing practical
experience in conducting third-party cyber incident investigations,
making this a prime platform to create a meaningful difference and
advance their careers within an innovative setting. As a dedicated
Information Security Analyst Senior - 3P incident Handler, you will
investigate, analyze, and respond to security anomalies and events
(e.g. suspicious behavior, attacks, and security breaches) within
USAA’s environments using a variety of cyber defense tools to
detect and respond to threats. Conduct vulnerability, security
configuration, and / or penetration testing assessments of systems
and networks. Identify cyber threats, analyze operational impacts,
and communicate to appropriate stakeholders. Stays current with the
latest information security threats, exploits, trends, and
intelligence. We offer a flexible work environment that requires an
individual to be in the office 4 days per week. This position can
be based in one of the following locations : San Antonio, TX, Plano,
TX, Phoenix, AZ, Colorado Springs, CO, Charlotte, NC, Chesapeake,
VA or Tampa, FL. Relocation assistance is not available for this
position. What you'll do : Leads peers and team members in the
execution of the Information Security domain activities while
anticipating efforts that will impact their team. Researches and
analyzes the latest information security vulnerabilities, threats,
exploits, trends and intelligence. Shares intelligence with peer
teams. Conducts advanced vulnerability management, security
configuration assessments, and / or penetration testing operations
and manages the resulting findings. Develops analysts through
training and knowledge sharing activities. Monitors internal and
external networks, systems, and applications for advanced security
anomalies and events (e.g. suspicious behavior, attacks, and
security breaches). Trains analysts in incident detection and
response. Responds to cyber incidents, performing detailed analysis
using complex security tools to determine root cause and impact by
using a broad range of demonstrated experience (e.g. forensics,
networking, servers, coding, etc.) to determine a malicious actor's
tactics, techniques, and procedures. Trains new analysts in
incident detection and response. Utilizes discoveries from the
incident response process to make significant and / or complex
improvements to the existing detection capabilities, operational
processes and security controls. Prepares and delivers written
and / or verbal briefs with recommendations to senior leadership on
latest threats, alerts, incidents, and improvements. Provides
insight on issues and serves as a mentor and coach to peers and
team members for assigned area of responsibility. Ensures risks
associated with business activities are effectively identified,
measured, monitored, and controlled in accordance with risk and
compliance policies and procedures. What you have : Bachelor’s
degree; OR 4 years of related experience (in addition to the
minimum years of experience required) may be substituted in lieu of
degree. 6 years of related experience in Information Security,
Cybersecurity and / or Information Technology with a security focus
to include accountability for complex tasks and / or projects. 4
years of related experience in one of the following domains :
Security and Risk Management, Asset Security, Security Architecture
and Engineering, Communications and Network Security, Identity and
Access Management, Security Assessment and Testing, Security
Operations, Software Development Security. Advanced level of
business acumen in the areas of business operations, risk
management, industry practices and emerging trends. Knowledge of
attacker tools / tactics / procedures and applying them to access
management, governance, threat hunting, investigations, and
incident response. Knowledge of defense-in-depth principles and
security architecture. What sets you apart : Hands on experience
conducting Cyber Incidents Experience investigating to resolve root
cause Incident Handling Certification and one or more of the
following - CISSP / CRISC US military experience through military
service or a military spouse / domestic partner Compensation range :
The salary range for this position is : $127,310.00 -$243,340. USAA
does not provide visa sponsorship for this role. Please do not
apply for this role if at any time (now or in the future) you will
need immigration support (i.e., H-1B, TN, STEM OPT Training Plans,
etc.). Compensation : USAA has an effective process for assessing
market data and establishing ranges to ensure we remain
competitive. You are paid within the salary range based on your
experience and market data of the position. The actual salary for
this role may vary by location. Employees may be eligible for pay
incentives based on overall corporate and individual performance
and at the discretion of the USAA Board of Directors. The above
description reflects the details considered necessary to describe
the principal functions of the job and should not be construed as a
detailed description of all the work requirements that may be
performed in the job. Benefits : At USAA our employees enjoy
best-in-class benefits to support their physical, financial, and
emotional wellness. These benefits include comprehensive medical,
dental and vision plans, 401(k), pension, life insurance, parental
benefits, adoption assistance, paid time off program with paid
holidays plus 16 paid volunteer hours, and various wellness
programs. Additionally, our career path planning and continuing
education assists employees with their professional goals. For more
details on our outstanding benefits, visit our benefits page on
USAAjobs.com. Applications for this position are accepted on an
ongoing basis, this posting will remain open until the position is
filled. Thus, interested candidates are encouraged to apply the
same day they view this posting. USAA is an Equal Opportunity
Employer. All qualified applicants will receive consideration for
employment without regard to race, color, religion, sex, sexual
orientation, gender identity, national origin, disability, or
status as a protected veteran.
Information Security Analyst • Colorado Springs, CO, US