Logo
Busey

Senior IT Security Analyst

Busey, Denver, Colorado, United States, 80285

Save Job

Overview

The Senior IT Security Analyst is responsible for managing activities relating to monitoring and responding to security events. The analyst monitors application, host, and network threats, including external threat actors and rogue insiders. As a trusted member of the Information Security team, the analyst works closely with internal technical teams, business units, and external entities aligned with the business, including private intelligence-sharing groups, law enforcement, and government agencies. The analyst conducts in-depth research, documents threats, understands the risk to the business, and shares information with those who need to know. Analysts are expected to continually adapt to stay ahead of cyber attackers and stay up to date on the latest methods attackers use to infiltrate computer systems. This role requires a passion for security and rigor to protect the business. Duties & Responsibilities

Responsible for developing, managing, and maintaining threat intelligence and threat hunting programs and processes Regularly research and identify emerging threats, TTPs in public and closed forums, assess risk, and implement/validate controls as necessary Assist with Security Operations activities, including triage of alarms/alerts and performing technical security assessments Participate in a call tree for outsourced Security Operations Center to assist with triage and remediation of critical and high-rated alerts escalated during and after business hours Research and recommend solutions to fulfill regulatory compliance with FFIEC guidelines, Sarbanes-Oxley, GLBA, and other regulations applicable to financial services industry and publicly traded companies Perform periodic review of IT procedures and security of all systems to maintain integrity of company and customer data Document and verify IT-related changes in accordance with Company security policies and procedures Research and recommend hardware and software solutions to augment or enhance existing security measures Stay current in events and trends in IT security Investigate and report security violations and incidents and ensure proper protection and corrective measures are taken when discovered Conduct scheduled reviews of key application security settings Develop metrics and scorecards to measure risk to the organization and the effectiveness of SOC associates Assist in process development and improvements to maximize department efficiency and effectiveness Support audit and incident processes, as required Monitor and support internal SIEM systems, reports, and searches Monitor and support internal phishing email report systems and reports Collaborate with cross-functional teams and establish strong liaison relationships with key internal business and technology teams Coach levels I & II on security domains and program processes Participate in security work streams for a variety of enterprise projects and initiatives Determine and communicate security risk postures to partners and leaders as appropriate Knowledge, Skills & Experience

Strong experience with threat information sharing and threat hunting in medium to large environments Proficient with SIEM tools, threat intelligence platforms, and SOAR solutions to centralize and manage incident workflows Knowledge of networking concepts and securing traffic across LAN, WAN, and Internet infrastructure Proficiency in Windows, Linux, and MacOS to research and analyze threats in a sandbox and respond to incidents Experience in incident handling and investigation including using formal chain-of-custody methods, forensic tools, and best practices Knowledge of adversary TTPs, MITRE ATT&CK framework, and CVSS Ability to script in Python, Bash, Perl, RegEx, or PowerShell Familiarity with cloud architectures, security standards, and best practices Strong oral and written communication, organizational skills, and attention to detail Abilities

Analyze incident logs, attack vectors, and understand vulnerabilities and exploits Take independent action within established options and develop new procedures when necessary Analyze assignments using broad knowledge of factors requiring advanced or technical concepts Self-starter requiring minimal supervision Highly organized and efficient with strategic and tactical thinking Stay current with the evolving threat landscape Perform duties and make decisions under time pressure Education & Training

(Preferred) Bachelor’s degree in Computer Science, MIS or related field or equivalent work experience On-the-job training in security operations, threat intel and hunting, system administration, incident response, or equivalent Security+, CySA+, GCIH, CSA, CCSP or similar certification; or ability to pursue certification within six months of hire At least 5 years’ experience in security operations center environments, threat intelligence/hunting, or security systems administration Requires knowledge of Microsoft Office and other productivity tools Benefits, Compensation & Other Details

Salary offered is based on factors including job duties, required qualifications and relevant experience, and local market trends. Base Pay Range: $86,000 - $123,000/year. The role may be eligible for bonus or incentives based on company and individual performance. Busey provides a Total Rewards package including 401(k) match, profit sharing, employee stock purchase plan, paid time off, medical/dental/vision, life insurance, long-term disability, voluntary life insurance, wellness incentives, employee assistance program, and pre-tax health savings or flexible spending accounts. Visit Busey Total Rewards for more information. Equal Opportunity

Busey values a diverse and inclusive workplace and is an Equal Opportunity Employer including Disability/Vets. Visit Busey.com/Careers to learn more about Busey’s Equal Opportunity Employment. Unsolicited Resumes

Busey Bank does not accept liability for fees for resumes from recruiters or agencies without a binding written recruitment agreement. Busey may consider candidates submitted by agencies with an Agreement. Agencies are requested not to contact associates with recruiting inquiries or resumes. No phone calls or emails, please. Application Deadline 11/15/25 Job Details

Seniority level: Mid-Senior level Employment type: Full-time Job function: Information Technology Industries: Banking

#J-18808-Ljbffr