Cybersecurity Operations Analyst (Infrastructure Specialist Associate - PN 20098661)

State of Ohio • Columbus, OH

1d

About The Position

About Us: Our mission at the Ohio Department of Health (ODH) is advancing the health and well-being of all Ohioans. Our agency is committed to building a modern, vibrant public health system that creates the conditions where all Ohioans flourish. What You'll Do: The Office of Management Information Systems (OMIS) administers the computer-based management systems across the ODH enterprise. The office is responsible for maintaining ODH computer networks and servers and for the development and implementation of strategies that support the current and future technology needs of the agency. We are seeking a Cybersecurity Operations Analyst (Infrastructure Specialist Associate) to work under direct supervision in order to become proficient, receive training on and assist higher-level Infrastructure Specialists with installation, monitoring/maintenance, configuration, upgrading, and/or administration/operation of a single assigned technology domain. This position will: Assist higher level security staff with security operations Monitor enterprise security tools such as Security Information and Event Management platforms, endpoint detection systems, and vulnerability management solutions Research security events by gathering additional context from logs, threat intelligence sources, and internal systems Review and triage security alerts to identify potential threats, suspicious behavior, or policy violations Assist with proactive security activities including vulnerability scanning, patch tracking, and security health reporting Assist with identifying and tracking application vulnerabilities by reviewing scanning results, dependency reports, and secure coding findings Collaborate with development teams to support remediation efforts, including verifying fixes, rescanning applications, and ensuring secure coding practices are followed Collaborate with IT teams to support broader security initiatives Develop and maintain ad-hoc utilities or reports to automate processes The State of Ohio is a drug free workplace which prohibits the use of marijuana (recreational marijuana/non-medical cannabis). Please note, this position may be subject to additional restrictions pursuant to the State of Ohio Drug-Free Workplace Policy (HR-39), and as outlined in the posting. All eligible applications shall be reviewed considering the following criteria\: qualifications, experience, education, and active disciplinary record. Ohio is a Disability Inclusion State and strives to be a model employer of individuals with disabilities. The State of Ohio is committed to providing access and inclusion and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act (ADA) and other applicable laws. ALL ANSWERS TO THE SUPPLEMENTAL QUESTIONS MUST BE SUPPORTED BY THE WORK EXPERIENCE/EDUCATION PROVIDED ON YOUR CIVIL SERVICE APPLICATION.

Requirements

• 18 months combined work exp. &/or trg. In any combination of the following\: installing, monitoring/maintaining, configuring, upgrading, &/or administering/operating a single technology domain.
• -Or successful completion of IT Apprenticeship program at designated agency.
• -Or completion of associate core program in computer science or information systems.

Nice To Haves

• Undergraduate or advanced degree in Computer Science or Information Systems
• Experience with security event response (review and triage security events, respond to appropriate parties, assist with remediation and documentation efforts)
• Experience with Vulnerability Management Tools (e.g. Qualys)
• Experience with cybersecurity platforms for endpoint detection, threat intelligence, and incident response (e.g., Crowdstrike)
• Experience with Security Information and Event Management (SIEM) platform (e.g. Google SecOps+)
• Experience with DevOps tools (e.g., Azure DevOps, GitHub)
• Experience with static code scanning tools (e.g., Checkmarx, CXone)
• Experience collaborating with IT teams to support vulnerability remediation efforts (e.g., tracking vulnerabilities, support basic risk assessment activities by gathering information, reviewing scan results, and confirming vulnerability details)

Responsibilities

• Assist higher level security staff with security operations
• Monitor enterprise security tools such as Security Information and Event Management platforms, endpoint detection systems, and vulnerability management solutions
• Research security events by gathering additional context from logs, threat intelligence sources, and internal systems
• Review and triage security alerts to identify potential threats, suspicious behavior, or policy violations
• Assist with proactive security activities including vulnerability scanning, patch tracking, and security health reporting
• Assist with identifying and tracking application vulnerabilities by reviewing scanning results, dependency reports, and secure coding findings
• Collaborate with development teams to support remediation efforts, including verifying fixes, rescanning applications, and ensuring secure coding practices are followed
• Collaborate with IT teams to support broader security initiatives
• Develop and maintain ad-hoc utilities or reports to automate processes

Benefits

• Medical Coverage
• Free Dental, Vision and Basic Life Insurance premiums after completion of eligibility period
• Paid time off, including vacation, personal, sick leave and 11 paid holidays per year
• Childbirth, Adoption, and Foster Care leave
• Education and Development Opportunities (Employee Development Funds, Public Service Loan Forgiveness, and more)
• Public Retirement Systems ( such as OPERS, STRS, SERS, and HPRS ) & Optional Deferred Compensation ( Ohio Deferred Compensation )

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree
• Number of Employees: 101-250 employees