Information Security Analyst (54518)

CAPITAL AREA INTERMEDIATE UNIT•East Pennsboro Township, PA

3d•$66,320 - $82,900•Onsite

About The Position

The Information Security Analyst will perform day-to-day cybersecurity threat analysis, incident response, and vulnerability remediation to ensure the confidentiality, integrity, and availability of digital assets. This role involves collecting data from cybersecurity consortium members to create reports, plans, and policies that support the region's cybersecurity efforts.

Requirements

A two-year college degree or completion of a specialized course of study at a business or trade school.
Three years of similar or related experience, including preparatory experience.
Knowledge of Windows server environment, Active Directory and Group Policy Management.
Working knowledge of VMWare or virtualization technologies.
Experience using enterprise firewall.
Strong knowledge of security frameworks, CIS controls.
Strong knowledge of software, hardware, and networking protocols.
Ability to work with technical and nontechnical staff.
Knowledge of implementing industry best practices for security, storage, and disaster recovery protocols.
Experience in delivering training to large groups of people.
Excellent communication skills.
Must demonstrate leadership abilities.

Nice To Haves

IT certifications or IT security certifications preferred.

Responsibilities

Identify, monitor, resolve, and triage security issues using various technical security solutions.
Monitor system security baselines, conduct vulnerability analysis, and coordinate mitigation and response for systems within the CAIU and its member districts.
Conduct incident analysis and response using technical security solutions such as SIEM, UEBA, network threat analysis, IDS/IPS, endpoint protection platforms, and next-generation firewall tools.
Create, deploy, and administer various technical security solutions for the CAIU and its member districts.
Coordinate the ongoing development, maintenance, execution, and testing of Disaster Recovery and Data Recovery Plans for the CAIU and its member districts, including regular review and testing of critical system backups.
Participate in the implementation and development of technical, governance, risk, and compliance policies and procedures.
Review and ensure the compliance of protocols and standards throughout the CAIU and its member districts.
Establish and maintain a documentation library for processes, policies, and technical data covering systems and networks.
Work with end users and CAIU member districts to communicate and train on best IT security measures.
Deliver security awareness training, support phishing awareness activities, and conduct data/malware analysis.
Maintain proficiency in cybersecurity trends and issues, participating in continuing education focused on vulnerability and threat identification, mitigation, incident response, and security assessment/penetration testing.
Maintain confidentiality regarding sensitive incidents and information.
Provide support for the implementation of projects aligned with CAIU security goals.
Attend CAIU technology meetings and other assigned meetings.
Assume any other responsibilities as assigned by Supervisor/Director of Technology or Executive Director.