Security Analyst

𝐊𝐞𝐲 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐢𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬:

🔒 Provide guidance and technical assistance to system administrators in securing systems and networks.
🔒 Ensure continuous monitoring of the entire network for security vulnerabilities and compromises.
🔒 Conduct security self-assessments (e.g., Penetration Testing) to evaluate the processes, procedures, and tools used to review, assess, and test information systems controls and security.
🔒 Report security status, vulnerabilities, and issues to management.
🔒 Collaborate with the Department of Administration Division of Enterprise Technology on pre- and post-implementation audits of new systems to ensure secure integration.
🔒 Perform periodic review and analysis of system integrity, data integrity, and data flows.
🔒 Ensure the quality and consistency of all IT-related activities, including standards, policies, and procedures.
🔒 Audit access rights and ensure alignment with policies.

𝐑𝐞𝐪𝐮𝐢𝐫𝐞𝐝 𝐒𝐤𝐢𝐥𝐥𝐬 & 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞:

✅ 7+ years of experience in similar roles.
✅ Strong understanding of Directory Services, including Active Directory.
✅ Proficient in Modern Authentication, Authorization, and Accounting, including Role-based (RBAC) and Attribute-based Access Controls (ABAC).
✅ Knowledgeable in Identity Access Management (IAM) systems and Network Access Control (NAC).
✅ Strong understanding of SIEM methods and tools.
✅ Familiarity with the National Vulnerability Database (NVD), Common Vulnerability Database (CVE), Common Weakness and Enumeration (CWE), and Common Attack Pattern Enumeration and Classification (CAPEC) Database.
✅ Basic understanding of Transact-SQL and ANSI Structured Query Language (SQL).
✅ Intermediate proficiency in PowerShell scripting.
✅ Knowledge of NIST Risk Management Framework (RMF) and Cybersecurity Framework (CSF).
✅ Understanding of cybersecurity risk management principles.
✅ Experience with Tenable Administration, MS Web Defender Administration, Zimperium (Mobile Device) Administration, and Zscaler Administration.
✅ Familiarity with the Incident Response Lifecycle.