Summary

As the Cyber Security Analyst, you will design and implement IT security policies and systems to protect the organization’s computer networks from cyber-attacks. You will also help develop organization-wide best practices for IT security, including security training for staff. You will monitor computer networks for security issues, install security software, and document all security issues or breaches you find. You will report vulnerabilities to management as identified and in a timely manner and ensure remediation.

 

Essential Duties

Under the general direction of the CIO, the Cyber Security Analyst will:

• Create countywide cybersecurity policies for approval and implementation.
• Perform daily monitoring and support of all systems and networks to identify security issues.
• Investigate security breaches and other cybersecurity incidents.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls, IDS/IPS, and other security systems.
• Document security breaches and assess the damage they cause.
• Work with the IT team to perform tests and uncover network vulnerabilities.
• Fix detected vulnerabilities to maintain a high-security standard.
• Stay current on IT security trends and news.
• Recommend changes to company policies to advance best practices for IT security.
• Perform vulnerability scanning and penetration testing.
• Help colleagues install security software and understand information security management.
• Participate in disaster recovery testing.
• Work cross-functionally as needed to improve the security posture of the organization, including SQA and development team resources.
• Coordinate the collection of security controls evidence in support of certification and customer audits; participate in audits as needed.
• Assist with completion of security questionnaires for customers, partners, and RFP responses.

Qualifications

• 3 years of experience working with Windows operating systems.
• 3 years of experience working with cloud services from a security perspective.
• 5 years of experience working with networking equipment, including switches, routers, firewalls, proxy servers, VPNs, and IDS/IPS.
• Detailed knowledge of network troubleshooting tools such as Fiddler, Wireshark, and Traceroute.
• 3 years of experience working with identity and access authorization systems such as Active Directory, LDAP, and Radius.
• Strong working knowledge of encryption protocols, ciphers, and the configuration of systems.
• Knowledge of current computer security practices and network protocols.
• Experience with Nexpose, Metasploit, or similar security software.
• Customer service–focused and detail-oriented.
• Ability to work effectively as an individual contributor and collaboratively in workgroups.

Physical Requirements

While performing the duties of this position, the employee is frequently required to read documents in paper and electronic form, sit, walk, and talk or hear. Occasionally, the employee will need to stand and climb stairs; reach above shoulder height; and kneel, stoop, crouch, or squat. On rare occasions, the employee will need to lift or carry items.

Work Environment

• 8:30 a.m. to 5:00 p.m. 40 weekly hours. 
• Extended hours may be required to meet agency needs.

Contact

To apply, please go to Neo.gov.