Information Security Analyst Senior

Arizona Department of Administration•Phoenix, AZ

18h•Hybrid

About The Position

The Department of Economic Security (DES) is seeking an experienced and highly motivated individual to join their team as an Information Security Analyst Senior. This role is responsible for reviewing threat intelligence feeds and alerts, identifying affected devices, investigating logs and traffic patterns, isolating and correcting system faults, and generating leadership incident and threat reports. The position requires proactively solving problems and maintaining an understanding of Agency, State, and Federal requirements as they apply to agency systems and data. This is a highly collaborative role involving frequent interaction with the IT team and DTS customers. The position may offer the ability to work remotely within Arizona based on department needs and performance.

Requirements

Knowledge of incident response and handling methodologies.
Knowledge of cyber-security and privacy principles, and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Knowledge of how traffic flows across the network (e.g.; Transmission Control Protocol [TCP] and Internet Protocol [IP]).
Knowledge of Network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
Knowledge of Virtual Private Network (VPN) security.
Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities.
Knowledge of Vulnerability assessment, analysis and threat modeling techniques for prioritization purposes.
Knowledge of Web filtering technologies.
Knowledge of Cyber defense and information security policies, procedures, and regulations.
Knowledge of Basic system, network, and OS hardening techniques.
Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
Knowledge of Network traffic analysis (tools, methodologies, processes).
Knowledge of Current Windows operating systems including web services.
Knowledge of Phishing and other exploitation techniques.
Skill in understanding host/network access controls (e.g., access control list).
Skill in using incident handling methodologies.
Skill in using Virtual Private Network (VPN) devices and encryption.
Skill in securing network communications.
Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).
Skill in System, network, and OS hardening techniques. (e.g., remove unnecessary services, password policies, network segmentation, enable logging, least privilege, etc.).
Skill in applying cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
Skill in assessing security logs and information from multiple sources to manually correlate information and arrive at a defensible assessment.
Ability to prepare content appropriate information and presentations from raw data to various levels of audience.
Ability to research and learn independently.
Ability to collaborate.
Ability to quickly identify, interpret, assess, and react to security related events and notifications.
Bachelor's degree plus 3 or more years of experience in information security analysis (or equivalent experience).

Nice To Haves

CySA+ Security Certification or higher strongly preferred

Responsibilities

Conducts traffic analysis to identify and characterize threats.
Assist in the implementation of new services and improvement of existing security services including installation and monitoring, specifically ensuring security and compliance requirements are met or exceeded and that the service meets sustainability goals.
Generates leadership reports, metrics and audit quality artifacts of service execution.
Identify and remediate deficiencies and proactively solve problems.
Implement new software, upgrades, patches and fixes to ensure that security platforms and services are healthy and running as expected.
Assist with the coordination of security activities with other IT functional teams concerning the implementation of new security services and solutions.
Provide security guidance concerning required remediation activities.
Regularly review the threat landscape for emerging threats to the organization.
Make assessments concerning the findings and socialize them within the security team.
Determine if alteration is required or recommended to existing security services and solutions to protect against these threats.
Maintain and update Security Services Catalog where appropriate - inclusive of Tasks, Checklists, Procedures and Metrics.

Benefits

Affordable medical, dental, life, and short-term disability insurance plans
Participation in the Arizona State Retirement System (ASRS) and long-term disability plans
10 paid holidays per year
Paid vacation and sick time
Paid Parental Leave-Up to 12 weeks per year paid leave for newborn or newly-placed foster/adopted child.
Deferred compensation plan
Wellness plans
Tuition Reimbursement
Stipend Opportunities
Infant at Work Program
Rideshare and Public Transit Subsidy
Career Advancement & Employee Development Opportunities