CYBERSECURITY ANALYST

State of Florida • Tallahassee, FL

1d • $70,000 - $85,000 • Onsite

About The Position

The Florida Department of Health is seeking a highly motivated Cybersecurity Analyst to join the Office of Information Technology. This position plays a critical role in defending one of Florida's largest public-sector technology environments, protecting the systems and data that support statewide public health programs, County Health Departments, healthcare partners, and millions of Floridians. If you thrive in a fast-paced Security Operations Center (SOC) environment, enjoy investigating sophisticated cyber threats, and want your work to have a direct impact on public health and safety, we encourage you to apply. This position serves within the Security Administration section of the Office of the CIO and supports enterprise cybersecurity operations across the Department.

Requirements

• Proficient computer skills to include Word, Excel, PowerPoint and Outlook.
• Knowledge of monitoring processes and/or working with ticketing software.
• Knowledge of computer data bases.
• Knowledge of laws, legal codes, court procedures and government rules & regulations.
• Knowledge of the structure and content of the English language including the meaning and spelling of words, rules of composition, and grammar.
• Understanding written sentences and paragraphs in work related documents.
• Communicating effectively with others verbally and in writing.
• Talking to others to effectively convey information.
• Ability to establish and maintain effective working relationships with others.
• Listening to what other people are saying and asking questions as appropriate.
• Conduct fact-finding research.
• Knowledge of the methods of data collection and analysis.
• Organize data into logical format for presentation in reports, documents and other written materials.
• Knowing how to find information and identifying essential information.
• Finding ways to structure or classify multiple pieces of information.
• Ability to plan, organize and prioritize work assignments.
• Ability to work independently.
• Ability to maintain a high degree of accuracy and close attention to detail.
• Ability to maintain confidentiality.
• Knowledge of the cybersecurity incident-response lifecycle; security operations and agency-adopted incident-response and risk-management frameworks.
• SIEM and EDR technologies.
• Microsoft 365, identity, endpoint, server, network, and cloud telemetry.
• Windows and Linux fundamentals.
• Common network protocols.
• Threat intelligence.
• Vulnerability management.
• Malware behavior.
• Digital forensics.
• Evidence handling.
• Access control.
• Change management.
• Skill in security alert triage, log correlation, incident investigation, threat hunting, incident documentation, security-tool configuration and tuning, scripting and automation, network and process analysis, technical writing, and the use of Department-issued computing equipment, ticketing systems, and approved cybersecurity platforms.
• Ability to assess incident scope, severity, and business impact.
• Manage concurrent incidents and competing priorities.
• Exercise sound judgment under time-sensitive conditions.
• Maintain complete and accurate records.
• Support after-hours cybersecurity response when required.
• Experience with Security Operations Center (SOC) environments.
• Experience with SIEM platforms.
• Experience with Endpoint Detection and Response (EDR).
• Experience with Microsoft 365 security technologies.
• Experience with Windows and Linux administration.
• Experience with Identity and access management.
• Experience with Network protocols and network security.
• Experience with Incident response.
• Experience with Threat hunting.
• Experience with Digital forensics.
• Experience with Vulnerability management.
• Experience with Security monitoring and log analysis.
• Experience with Risk management.
• Experience with Scripting or automation (PowerShell, Python, or similar).
• Experience with Technical writing and incident documentation.

Nice To Haves

• GIAC (GCIH, GCIA, GCFA, GCFE, GREM) certifications
• CISSP certification
• Security+ certification
• CySA+ certification
• CEH certification
• Microsoft Security certifications
• Splunk, Sentinel, or similar SIEM certifications

Responsibilities

• Monitor, analyze, investigate, and respond to cybersecurity alerts and incidents across enterprise systems.
• Perform security event correlation using data from endpoints, servers, identity systems, Microsoft 365, cloud platforms, networks, SIEM, EDR, and other security technologies.
• Conduct incident triage, containment, eradication, recovery, and post-incident analysis.
• Perform proactive threat hunting to identify indicators of compromise and emerging threats before they impact the organization.
• Document the complete incident lifecycle, including evidence, timelines, technical findings, remediation activities, and executive reporting.
• Analyze cyber threats, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and recommend improvements to strengthen the Department's security posture.
• Configure, tune, and optimize enterprise cybersecurity technologies in accordance with approved security standards and change management procedures.
• Support enterprise risk management by identifying control gaps, assisting with security assessments, and tracking remediation efforts.
• Maintain incident response playbooks, standard operating procedures, and operational metrics.
• Collaborate with Department leadership, IT teams, County Health Departments, the Office of Inspector General, vendors, and external partners during cybersecurity investigations and response activities.
• Performs other assigned duties, including emergency response, continuity support, administrative responsibilities, and other activities supporting the unit and agency mission.

Benefits

• Annual and Sick Leave benefits
• Nine paid holidays and one Personal Holiday each year
• State Group Insurance coverage options, including health, life, dental, vision, and other supplemental insurance options
• Retirement plan options, including employer contributions
• Flexible Spending Accounts
• Tuition waivers

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed