Information Security Analyst I

Colorado Public Employees' Retirement Association•Denver, CO

5d•$72,000 - $88,000•Hybrid

About The Position

The Information Security Analyst I is responsible for monitoring and responding to security events, investigating vulnerability reports, planning and participating in system security reviews and audits, installing security software, configuring security products, assisting with platform upgrades, and supporting the day-to-day information security operations. This is a technical, internal-facing role that requires a combination of communication skills, problems solving skills, and technical aptitude. Our ideal candidate is an early career professional with an information security background, or someone who has worked in a technical capacity in IT services. We are searching for a skilled technician and require someone with excellent technical and communication skills who can help solve complex information security problems and minimize risk for Colorado PERA.

Requirements

General knowledge of MS Windows domain environment administration, incident response, vulnerability scanning, script reading, network design principles, and virtualization technology.
Demonstrated working experience in an IT discipline supporting any of Windows Active Directory, networking, security, virtualization, help desk, or other IT discipline.
Experience configuring devices and services for compliance with organizational security standards.
Familiar with reading and understanding configuration documents, security alerts, and log data.
Comfortable proactively responding to security incidents.
Experience configuring and testing platform upgrades or performing new software rollouts.
Demonstrated ability to be resourceful, make sound decisions, balance multiple initiatives, and drive issue to closure.
Passion for information security in practice and a general desire to continuously learn and understand varying aspects of IT and technology.
Degree in technical (STEM) field or one year experience in technical role.

Nice To Haves

Experience working with systems and software within assigned technology domain preferred.
Knowledge of Windows operating systems, Linux operating systems, server administration, desktop administration, troubleshooting, and user support preferred.
Proven knowledge of administration tasks, including user/group/role administration, security permissions administration, access authentication and authorization schemes, and user provisioning preferred.
Self-starter in systems administration and patching including ability to track changes and provide security reporting on assigned systems preferred.
Experience supporting Windows virtual desktop environments, Windows server infrastructure, vmWare systems, Linux or vendor provided platforms preferred.
Understanding of network devices and principles to include routers, switches, gateways, physical access systems, and wireless access systems preferred.
Basic knowledge and understanding of computer networking protocols, authentication protocols, and secure communications in a windows domain environment preferred.
Exposure to monitoring and escalating computer, network, and infrastructure security events including email phish investigation and operating system security preferred.

Responsibilities

Responds to information security alerts originating from systems including SIEM, Firewall/Proxy, AV/EDR tools, IDS/IPS tools, E-mail security gateways, password vaults, and other systems as needed.
Assists with management and onboarding of new vendors into VRM portal.
Addresses stakeholder concerns, conducts IRQ assessments, and facilitates vendor management throughout the VRM process.
Administers key technology within the information security program, acting as the first line of contact for platform user support.
Assists users and administrators with investigations and incident response.
Effectively troubleshoots applications, servers, and key information security services to maintain IT security posture.
Writes knowledge articles detailing results of troubleshooting or investigations.
Maintains and troubleshoots access management systems including assisting with upgrades and new feature planning.
Serves as the backup to senior staff helping manage tasks related to PAM.
Assists with GRC tasks including audit review, data governance review, access review, and compliance.
Patches, maintains, and supports key information security systems under the guidance of senior staff.
Evaluates and mitigates security vulnerabilities, remains conscious of security posture improvements, and understands how to escalate security issues.
Participates in DR test processes, learning about DR principals and procedures in use at PERA.
Looks for opportunity to improve confidentiality, integrity, and availability in all supported systems.
Assists, under direction of senior staff, in projects, system integrations, and application upgrades.
Participates in vendor security reviews, identifying and resolving issues with vendor solutions or configurations.
Able to research and test work independently, seeking guidance from colleagues only after making conclusions and gathering evidence.
Assists internal stakeholders with evidence gathering and analysis tasks.
Performs other duties as assigned.