Information Security Analyst I - City

City of Oklahoma City • Oklahoma City, OK

19h • $36 - $55 • Onsite

About The Position

This job is located in the Technology Infrastructure Division of the Information Technology Department within the City of Oklahoma City and is under the direction of the Information Security Manager. The Information Security Analyst I will apply and monitor information security systems, tools, policies, and procedures required to protect critical City assets.

Requirements

• Bachelor’s degree or higher in Management Science and Computer Systems, Management Information Systems, Cybersecurity, or field related to the position; or equivalent combination of education and experience, substituting one year of experience in Cybersecurity for each year of education required.
• Minimum of four (4) years of experience in Cybersecurity.
• Knowledge of securing systems, including web, database, and remote access systems.
• Knowledge of Data Loss Prevention.
• Knowledge of penetration and vulnerability testing.
• Knowledge of Security Information and Event Management (SIEM) and other logging systems.
• Knowledge of enterprise level risk management platforms.
• Knowledge of Cybersecurity vulnerability risk classification.
• Knowledge of Cybersecurity incident response.
• Knowledge of documenting systems, processes, and procedures.
• Knowledge of and ability to apply administrative and managerial techniques and methodologies.
• Knowledge of security frameworks and regulatory compliance, such as ISO 27001 or NIST 800.
• Skill in communicating technical information to non-technical personnel, both verbally and in writing.
• Ability to work with both internal and external personnel through coordinated efforts.
• Ability to organize information pertaining to work assignments.
• Ability to obtain an employer approved security certification within one (1) year.

Nice To Haves

• Advanced proficiency with SIEM/SOAR ecosystems, including pattern recognition, developing threat hunting queries, building and maintaining playbooks, performing deep log analysis, orchestrating log workflows, and integrating security tools through APIs to enhance automated detection and response.
• Skill in analyzing suspicious files, email attachments, scripts, and URLs; understanding malicious behaviors; and using sandboxing tools.
• Ability to analyze PCAPs, review firewall/IDS/IPS alerts, understand protocol behavior, and spot lateral movement or exfiltration patterns.
• Understanding of modern identity threats, such as token theft, Kerberos-based attacks, credential harvesting techniques, MFA fatigue, OAuth misuse, and attempts to bypass conditional access controls.
• Expertise in incident scoping, containment and remediation, including executing isolation actions, terminating malicious processes, collecting volatile memory, and validating eradication steps to ensure threats are fully removed.

Responsibilities

• Trains professional staff in security impact to specialized City applications and procedures and assists in preforming administrative functions.
• Identifies unique system configurations to develop standard information security documentation.
• Adjusts capabilities to prescribed information security controls and countermeasures to mitigate risk to acceptable levels.
• Audits cybersecurity technology systems and configurations for compliance to frameworks, policies, regulations, and law.
• Identifies, assesses, documents, tracks, prioritizes, and remediates cybersecurity vulnerabilities.
• Researches, analyzes, documents, and evaluates software applications and hardware systems.
• Performs other duties as assigned.

Benefits

• Competitive pay
• An average of $22,000 annually contributed toward your benefits and retirement
• A comprehensive package designed to support your health and wellness, financial security, work-life balance, and personal and professional growth and development

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level