Information Security Analyst Senior - 3P Incident Handler

Position Overview

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service, and trusted advice. Embrace a fulfilling career where core values such as honesty, integrity, loyalty, and service define how we treat one another and our members.

USAA Information Security Analysis & 3P Intel is offering a unique opportunity for a Sr. Incident Handler focused on third-party assessments. In this role, you will be central to managing and protecting the organization's data assets, shaping 3P incident handling, bolstering data security, and driving operational cost optimizations. This flexible work environment requires presence in the office 4 days per week and can be based in locations including San Antonio, TX; Plano, TX; Phoenix, AZ; Colorado Springs, CO; Charlotte, NC; Chesapeake, VA; or Tampa, FL. Relocation assistance is not available.

Compensation: The salary range for this position is $127,310.00 - $243,340. USAA maintains a competitive compensation process driven by market data and individual performance. Please note, USAA does not provide visa sponsorship.

Key Responsibilities

• Lead peers and team members in executing Information Security domain activities while anticipating impacts on the team.
• Research and analyze the latest information security vulnerabilities, threats, exploits, trends, and intelligence, sharing insights with peer teams.
• Conduct advanced vulnerability management, security configuration assessments, and penetration testing operations, managing and addressing findings.
• Develop analysts through training, knowledge sharing, and mentoring in incident detection and response.
• Monitor internal and external networks, systems, and applications for suspicious behaviors, attacks, or security breaches and respond to cyber incidents with detailed analysis to determine root cause and impact.
• Utilize insights from incident response processes to enhance detection capabilities, operational processes, and security controls.
• Prepare and deliver written and verbal briefs with recommendations to senior leadership regarding emerging threats, incidents, and improvements.
• Ensure risks associated with business activities are effectively identified, monitored, and controlled in line with compliance policies and procedures.

Required Qualifications

• Bachelor's degree; OR 4 years of related experience may be substituted in lieu of a degree.
• 6 years of related experience in Information Security, Cybersecurity and/or Information Technology with a security focus, accountable for complex tasks and projects.
• 4 years of related experience in one or more domains such as Security and Risk Management, Asset Security, Security Architecture and Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, or Software Development Security.
• Advanced business acumen in business operations, risk management, industry practices, and emerging trends.
• Knowledge of attacker tools, tactics, and procedures applied to access management, governance, threat hunting, investigations, and incident response.
• Understanding of defense-in-depth principles and security architecture.

Preferred Qualifications

• Hands-on experience conducting cyber incident investigations.
• Proven ability to investigate and resolve root cause issues.
• Incident Handling Certification and one or more of the following certifications: CISSP or CRISC.
• US military experience through military service or as a military spouse/domestic partner.

Benefits & Perks

• Comprehensive medical, dental, and vision plans
• 401(k) and pension plan
• Life insurance, parental benefits, and adoption assistance
• Paid time off with paid holidays plus 16 paid volunteer hours
• Various wellness programs alongside career path planning and continuing education opportunities