Cybersecurity Analyst

Bellwether Community Credit Union seeks a Cybersecurity Analyst in Manchester, NH (onsite) to support day-to-day security operations. This role focuses on monitoring and responding to security activity, managing vulnerabilities, automating workflows with scripting, and contributing to incident response and audit/compliance efforts.

Key Responsibilities

• Monitor and maintain security tools, investigate alerts and events, identify suspicious activity, and help ensure systems remain appropriately protected.
• Investigate security events, document findings, determine root causes, and support incident response activities when issues occur.
• Manage vulnerability scanning, prioritize risks, coordinate remediation with IT teams, and track issues through to resolution.
• Fine-tune alerts and improve detection rules, using PowerShell, Python, or Bash to automate repetitive tasks and reporting.
• Maintain security dashboards and metrics to understand security posture, identify trends, and guide attention toward priority areas.
• Test security controls, keep documentation accurate, gather audit evidence, and support regulatory examinations and compliance requirements.
• Partner with IT and business teams to strengthen security practices, address risks, and maintain reliable operations for systems and processes.

Required Qualifications

• 1–3 years of experience in a dedicated cybersecurity role and 2–5 years of general IT experience.
• A recognized security certification, such as CompTIA Security+, GIAC/GSEC, or an equivalent credential.
• Working knowledge of security tools, including SIEM, endpoint protection/EDR, and vulnerability scanners.
• Scripting experience with PowerShell, Python, Bash, or similar tools, including automation of manual or repetitive tasks.
• Strong Windows troubleshooting skills, plus working knowledge of networking fundamentals such as TCP/IP, DNS, DHCP, VLANs, and firewalls.
• Familiarity with security frameworks such as NIST CSF, CIS Controls, or MITRE ATT&CK.
• Strong attention to detail, organization, and follow-through when tracking risks and remediation.
• Ability to communicate clearly, maintain thorough documentation, work independently, and collaborate effectively with others.

Additional Qualifications (Preferred)

• An associate's or bachelor's degree in cybersecurity, IT, or a related field, or equivalent experience.
• GIAC certifications such as GSEC, GCIH, or GCIA.
• Experience with regulatory or audit frameworks such as NIST, FFIEC, or PCI DSS.
• Experience working in financial services or another regulated industry.

Technologies and Frameworks

• PowerShell, Python, Bash
• SIEM, endpoint protection/EDR, vulnerability scanners
• Windows
• TCP/IP, DNS, DHCP, VLANs, firewalls
• NIST CSF, CIS Controls, MITRE ATT&CK
• CompTIA Security+, GIAC/GSEC, CompTIA Cybersecurity Analyst (CySA+), GIAC GSEC, GIAC GCIH, GIAC GCIA

Core Values

• People First
• Local Focus
• Always Learning
• Driven with Purpose
• Own Our Outcomes