Information Security Analyst
About The Position
With general oversight from the IT Director, the Information Security Analyst designs, implements, and supports the security infrastructure for a wide variety of Henry County Water Authority (HCWA) IT systems and operational needs. This position will work with the IT team to ensure the confidentiality, integrity, and availability of site-wide communication networks, servers, and data backup systems. The position will play a key role in hardening enterprise servers, desktops and securing network physical components and logical switch configurations against modern threats. Additionally, this position will evaluate, configure, and maintain security software across departments - both server and client-side. The analyst proactively recognizes security vulnerabilities and risks, works with management to develop a course of action, and follows through to completion with a minimum of supervision. This role mentors other employees of HCWA on security best practices and must handle multiple projects concurrently, adjusting priorities dynamically while responding to high-priority security issues and incidents.
Requirements
- Bachelor's degree in Computer Science or related IT field from four-year college or university; and at least seven (7) years professional working experience in the IT field; or equivalent combination of education and experience.
- Experience with firewalls, asset discovery and cyber exposure tools, and network visibility platforms is required.
- Familiarity with common attack vectors, the MITRE ATT&CK framework, and effective containment strategies is required.
- Solid understanding of operating systems (Windows, Linux) and networking and network protocols (TCP/IP, DNS, DHCP, OSPF, etc.) is required.
Nice To Haves
- Microsoft 365 Tenant Administration is a strong plus.
- Scripting skills (e.g., Bash, PowerShell, or Python) for log filtering and task automation is a strong plus.
- Relevant certifications are a plus but not required: CompTIA Security+, CySA+, GIAC (GSEC/GCIH), or CEH.
Responsibilities
- Designs, implements, documents, and supports security configurations and hardening standards for Windows Server Network Operating Systems, corresponding hardware, application software, and system management tools.
- Continuously monitors enterprise systems, network infrastructure, and connected devices to identify outstanding patch requirements and security gaps.
- Utilizes ARMIS, EDR, and other security information and event management (SIEM) utilities to monitor network traffic, endpoint behavior, and IoT/OT environments for suspicious activity.
- Contains, mitigates, and remediates identified threats and vulnerabilities in collaboration with the wider IT and infrastructure teams.
- Maintains comprehensive visibility of all assets on the network (managed, unmanaged, and IoT) using asset intelligence platforms to ensure total security coverage.
- Works with other HCWA departments to provide technical assistance to help them meet their goals. As required, provides front-line helpdesk support on a variety of IT issues and serves as a backup to others in IT.
- Works with vendors on implementations and support issues, serving as an interface between our internal clients and the vendor.
- Installs, configures, evaluates and recommends new technologies with minimal impact on existing systems or other job duties.
- Proactively monitors and provides timely and accurate input to the call tracking system to resolve all open tickets in a minimum time frame. Documents processes, system configurations, policies and procedures in a shared document tracking system.
- Occasional after-hours/weekend work will be required for emergency on-call security situations, incident response, or to minimize patch impact to end-users.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
