Cyber Security Analyst

Protect What Matters. Defend the Future of Agriculture. Cyber threats never stop evolving. Neither do we. We're looking for a Cyber Security Analyst who thrives on solving complex problems, hunting threats, protecting critical systems, and making a real impact. If you're passionate about cybersecurity, enjoy investigating incidents, leveraging advanced security tools, and influencing the strategic direction of security programs, this is your opportunity to help safeguard an organization that serves thousands of customers across Missouri. Make an Impact Where It Matters For more than 100 years, FCS Financial has helped support agriculture, rural communities, and the future of Missouri. Today, that mission depends on secure technology, resilient systems, and cybersecurity professionals who can stay one step ahead of emerging threats. The Opportunity As a Cyber Security Analyst, you'll play a critical role in safeguarding FCS Financial's digital environment. You'll work alongside technology and business leaders to detect threats, investigate incidents, improve security defenses, and influence the future of our Information Security Program. In this role, you'll: Monitor and investigate security events across networks, systems, cloud environments, and endpoints. Identify, analyze, and respond to cybersecurity threats and incidents. Perform incident triage, vulnerability management, access reviews, and security troubleshooting activities. Leverage threat intelligence and security monitoring tools to strengthen organizational defenses. Support penetration testing, security audits, implementation of security controls, and compliance initiatives. Recommend and implement security improvements that reduce risk and enhance resiliency. Contribute to security policies, business continuity planning, and disaster recovery efforts. Partner with the CISO and technology teams to advance the Association's cybersecurity strategy. Why Join FCS Financial: Meaningful Impact: Help protect the systems and data that support Missouri agriculture and rural communities. Career Growth: Expand your expertise through challenging projects, emerging technologies, and evolving security threats. Collaborative Culture: Work with talented professionals who value innovation, continuous learning, and teamwork. Competitive Total Rewards: Enjoy a comprehensive salary, incentive opportunities and a comprehensive benefits package designed to support your overall well-being. Based on experience the base pay for this position is $88,000 – $150,000. Flexible Work Environment: Hybrid work opportunities available based on candidate qualifications and business needs. What You Need: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Security Management, or a related field (or equivalent experience). Five or more years of cybersecurity, information security, or related experience. Experience with incident response, threat detection, vulnerability management, and security monitoring. Knowledge of endpoint monitoring, email security, vulnerability scanning, and threat intelligence platforms. Understanding of cloud, network, and infrastructure security best practices. Strong analytical, investigative, and problem-solving skills. Ability to assess risk, prioritize threats, and communicate recommendations effectively. Preferred Certifications include: CISSP, GCIA, GCIH, GMON, or similar cybersecurity certifications. Location Jefferson City, Missouri This position is open until filled. This position is classified as Exempt under the Fair Labor Standards Act. Department: Information Services Reports To: Chief Information Security Officer Job Functions 30% Data and Information Security Monitoring and Automation Keep current with emerging security alerts and issues. Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts. Monitor server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution. Design, implement, and report on security system and end user activity audits. Work with technology partners to utilize technical systems and monitor them for unusual and suspicious activity across a wide range of products, data centers, and cloud systems. 30% Incident Analysis and Response Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation. Investigate possible security exceptions, administer incident response procedures and coordinate with internal personnel or external agencies as needed. Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation. Recommend and schedule (where appropriate) fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach. Track and document cyber defense incidents from initial detection through final resolution. Assist CISO with coordination of incident response functions. 25% Cyber Intelligence and Vulnerability Management Remain current with new security threats and assess systems and solutions to ensure they can defend the business. Work with CISO to ensure cybersecurity-enabled products or other compensating security control technologies or processes to reduce identified risk to an acceptable level. Analyze cyber defense policies and configurations and evaluate compliance with regulations and organizational directives. Conduct and/or support authorized penetration testing on enterprise network assets. Prepare audit reports that identify technical and procedural findings, and provide recommended remediation strategies/solutions. Perform technical and non-technical risk and vulnerability assessments of relevant technology focus areas (e.g., cloud, local computing environment, network and infrastructure, supporting infrastructure, and applications). 15% Planning Participate in the planning and design of enterprise security architecture, under the direction of the CISO and VP of Technical Operations, where appropriate. Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures) under the direction of the Chief Information Security Officer, where appropriate. Participate in the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan, under the direction of the Chief Information Security Officer, where appropriate. Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security Participate in the design and execution of vulnerability assessments, penetration tests and security audits. Recommend data security policies, procedures, standards and practices designed to minimize the risk of a breach and ensure the timely detection and containment of security incidents n/a Other duties as assigned to meet the needs of the organization. Essential Functions for this position consist of all items listed under any category that make up 5% or more of the job duties. This job description is subject to change without notice. Minimum Qualifications Bachelor’s degree in security management, cybersecurity, computer science, management information systems, or business with technical training in networking, technical support or security 5 years of related experience Or an equivalent combination of education and experience sufficient to perform the essential functions of the job CISSP, GMON, GCIA, CGIH or similar application certification preferred Required Knowledge and Skills A proven deep background in the areas of cybersecurity, technology and risk management. Ability to adapt and stay a step ahead of cyber attackers and stay up to date on the latest attack methods. Expert knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls, in addition to endpoint detection and response (EDR), threat intelligence platforms, data loss prevention (DLP), security automation and orchestration, deception technologies, application controls, and other network and system monitoring tools. Expert knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities. Expert knowledge of threat intelligence and vulnerability information dissemination sources (e.g., alerts, advisories). Expertise in incident response and system monitoring and analysis. Advanced experience with vulnerability and penetration testing engagements. Advanced knowledge of information technology security principles and methods. Advanced knowledge of technology systems’ characteristics and integration capabilities Advanced knowledge of data and security systems, best practices and resourcing Working knowledge of applicable laws, regulations, and controls Working knowledge of business processes and management Working knowledge of the use of technology in agriculture and the financial services industries Working knowledge of systems design and business requirements, sufficient to understand the opportunities and limitations of security measures and tools Skill in exercising judgment within broadly defined practices and policies Skill in making sound decisions based on analysis, discussion, experience and judgment Responsible for the security, and integrity of the Association’s systems and data and clients’ data #J-18808-Ljbffr