Information Security Analyst

Volusia Sheriff's Office•Daytona Beach, FL

1d•Onsite

About The Position

The Information Security Analyst is responsible for monitoring, detecting, analyzing, and responding to cybersecurity events across the agency’s technology environment. This role provides frontline security monitoring and incident handling while also supporting deeper investigation, vulnerability management, and threat analysis. The analyst helps maintain the confidentiality, integrity, and availability of agency systems while ensuring adherence to CJIS, organizational policies, and cybersecurity best practices.

Requirements

Graduation from high school or possession of a GED
A minimum of one (1) year of experience in IT, HelpDesk, SOC, System Administration, or security operations.
A comparable amount of education and experience may be substituted for the minimum requirements.
Ability to handle sensitive information and follow security procedures, including CJIS requirements.
Ability to assist users with MFA, identity management, and secure access practices.
Ability to identify, troubleshoot, diagnose, and resolve security-related issues involving endpoints, servers, applications, and network systems.
Ability to apply cybersecurity principles, incident response procedures, and best practices.
Ability to organize work, manage multiple tasks, establish priorities, and meet deadlines in high-pressure situations.
Ability to think logically and pay close attention to detail.
Basic understanding of networks, operating systems (Windows, Linux, Mac), and cybersecurity principles.
Familiarity with SIEM tools, EDR platforms, and vulnerability scanners.
Microsoft 365 applications and SharePoint.
Modern office practices, procedures, and equipment.
Business English, spelling, punctuation, and arithmetic.

Nice To Haves

Associate or bachelor’s degree in information technology (IT), cybersecurity, or related field preferred.

Responsibilities

Monitor SIEM alerts, endpoint detection tools, email security systems, and network traffic for indications of malicious activity.
Conduct initial investigation of suspicious events including phishing, malware detection, unauthorized access attempts, or policy violations.
Support the full incident response lifecycle including identification, containment, eradication, and recovery.
Assist with post-incident reviews, lessons learned, and remediation tracking.
Conduct basic proactive threat hunting activities to identify abnormal behaviors or patterns that may indicate compromise.
Correlate threat intelligence with agency logs, alerts, and telemetry.
Validate and track remediation of discovered vulnerabilities across endpoints, servers, and network infrastructure.
Assist in managing and tuning SIEM, EDR, IDS/IPS, email filtering, identity security, and other defensive tools.
Support user access reviews, MFA troubleshooting, and identity governance tasks.
Support compliance efforts with CJIS Security Policy, internal policies, and audit requirements.
Assist with cybersecurity awareness activities and phishing simulations.
Collaborate with vendors, service providers, and partnering agencies to resolve technical issues, support integrations, ensure compliance, and maintain secure information-sharing practices.
Participate in the on-call rotation.
Attend work on a regular and consistent basis.
Must adhere to Federal, State, County, and local ordinances.
Performs other duties as assigned.