Information Technology Security Analyst

The Information Technology Security Analyst reports directly to the Deputy Chief Information Security Officer. Supports the administration, implementation, review, and improvement of cloud, endpoint, network, hardware, application, and data security practices.

1. Implements, maintains, supports, and monitors the agency's information security services and applications, including email filters, web proxies, web application firewalls, network firewalls, intrusion prevention systems, SIEM, endpoint security, mobile device management, multi-factor authentication, client access, secure browser, threat intelligence resources, vulnerability management, etc. Monitors system dashboards and logs for threat indicators. Analyzes data and performs incident response procedures. Assists with the continuous improvement of SOAR and incident response capabilities.

2. Supports and monitors the agency's vulnerability and compliance assessment program. Conducts cloud, network, system, and application vulnerability and compliance assessments. Utilizes CIS benchmark configurations and works with agency stakeholders to help drive system and application hardening efforts. Ensures patching and remediation efforts comply with agency service level agreements. Documents violations and provides reports to management. Reviews and responds to information received concerning threat events from end users, federal, state, county and local agencies as well as external association entities such as ISACs, trusted security vendors, law enforcement agencies, and public information sources.

3. Monitor, tune, and investigate alerts from enterprise data-loss prevention and cloud security platforms to detect, prevent and remediate unauthorized exfiltration or exposure of sensitive data. Partner with teams to identify, classify and tag sensitive data assets across on-premise and cloud storage environments.

4. Interacts with SBE staff on security and compliance issues. Responds to report requests and provides analytical context. Provides a high level of customer service to agency staff, state, county, and local election officials. Coaches staff on secure practices and principles. Ensures service desk queues and incidents are handled in an appropriate and timely manner. Service desk ticket resolutions are thoroughly documented and knowledge base articles are maintained.

5. Continues education by attending training sessions, seminars, and conferences to increase familiarity with and maintain current knowledge of security products, vendors, techniques, and procedures. Research security enhancements and make recommendations to management. Participates in cybersecurity-focused organizations. Monitors on-line information security related websites, blogs, articles, reports as well as other security intelligence sources to keep up-to-date on the latest threats, IOCs and trends.

6. Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above. Provides off-hours support as required.