Cyber Security Analyst (On-Site)

A FULL HOUSE OF TOTAL REWARDS

• Compensation:  Starting salary range of $94,183.05 - $103,601.35/year, depending on experience, with opportunities for annual performance-based increases. The role offers a potential career earning trajectory reaching up to $135,623/annually max over time.  
• Full Coverage: 100% employer-paid medical, dental, vision, and prescription coverage, plus competitive family rates starting after 60 days, with additional benefits such as 401(k), employer-paid life insurance, and long-term disability.
• Generous PTO: Accrue 21 days of PTO in your first year, growing to 33 days after five (5) years, with an option to cash out twice annually.
• Everyday Perks: Free meals, parking, paid breaks, 40c/gallon gas discount, and exciting giveaways like concert and sports tickets.
• Growth & Support: Access to tuition reimbursement, certification programs, and Employee Assistance Program.

Note: This is an on-site role in Snoqualmie, WA. 

PURPOSE

The Cyber Security Analyst is responsible for protecting Snoqualmie Casino & Hotel’s information systems and networks from cyber threats. This includes monitoring, analyzing, and responding to security incidents, conducting vulnerability assessments, and implementing security measures to safeguard the organization's digital assets. The analyst will work closely with the IT team and other departments to ensure compliance with security policies and regulatory requirements.

ESSENTIAL DUTIES / RESPONSIBILITIES 

• Security Monitoring and Incident Response: Continuously monitor security systems and alerts to identify and respond to potential security incidents. Investigate and mitigate security breaches, ensuring minimal impact on operations.
• Vulnerability Management: Conduct regular vulnerability assessments and penetration tests to identify security weaknesses. Implement corrective actions to address vulnerabilities.
• Security Policies and Compliance: Develop, implement, and enforce security policies and procedures in compliance with regulatory requirements and industry best practices. Ensure adherence to data protection regulations and gaming industry standards.
• Risk Assessment: Perform risk assessments to evaluate the effectiveness of existing security measures. Recommend and implement improvements to mitigate identified risks.
• Security Awareness Training: Develop and deliver security awareness training programs for Team Members to promote a culture of security within the organization.
• System Hardening: Configure and maintain security systems, including firewalls, intrusion detection/prevention systems (IDS/IPS), and antivirus solutions. Ensure all systems are properly hardened and patched.
• Incident Documentation and Reporting: Maintain detailed documentation of security incidents, responses, and resolutions. Prepare regular reports on security activities and incidents for management.
• Collaboration and Communication: Work closely with IT team and other departments to ensure security measures are integrated into all aspects of IT infrastructure and operations. Communicate security risks and mitigation strategies to stakeholders.
• Continuous Improvement: Stay current with emerging security threats, technologies, and best practices. Continuously evaluate and improve security processes and tools.

Education and Experience:

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related field. CompTIA Security+, CISM, CRISC, CISA, GSEC, CISSP, or similar certification and two (2) years of additional full-time cyber security experience may be considered in lieu of education.
• Four (4) years of experience in cyber security, including incident response, vulnerability management, and risk assessment.
• CompTIA Security+ certification, or willingness to obtain within six (6) months of hire and maintain throughout employment.

Skills and Abilities:

• Technical Proficiency: Advanced knowledge of security technologies, including firewalls, IDS/IPS, SIEM, antivirus solutions, and encryption methods.
• Analytical Skills: Strong analytical and problem-solving skills to identify and resolve security issues effectively.
• Incident Response: Demonstrated ability in handling and responding to security incidents, including conducting forensic analysis and root cause investigations.
• Vulnerability Management: Expertise in conducting vulnerability assessments, penetration tests, and implementing remediation strategies.
• Regulatory Compliance: Knowledge of regulatory requirements and standards such as PCI-DSS and gaming industry regulations.
• Communication Skills: Excellent written and verbal communication skills to document incidents, write reports, and communicate security risks to non-technical stakeholders.
• Attention to Detail: Keen attention to detail to ensure accuracy in security monitoring and incident documentation.
• Collaboration: Ability to work collaboratively with IT staff and other departments to implement security measures and resolve security issues.
• Continuous Learning: Commitment to staying current with emerging security threats, technologies, and best practices through continuous learning and professional development.
• Confidentiality: Ability to handle sensitive information with the highest level of confidentiality and integrity.

PREFERRED

Education and Experience:

• CISM, CRISC, CISA, GSEC, CISSP, or similar certification

Snoqualmie Casino & Hotel exercises Snoqualmie Tribal Member/Native American preference in hiring, in compliance with the Snoqualmie Tribal Employment Rights Ordinance (TERO). You must obtain and maintain a Gaming License from the Snoqualmie Gaming Commission. Pre-employment drug testing is required for all positions. The use of marijuana will not disqualify an applicant for positions in any department other than Transportation (Valet, Driver I). DOT panel testing is required for the Driver position.