Information Systems Technician II - Security Operations

Illinois Secretary of State•Springfield, IL

1d•$5,992 - $11,392•Onsite

About The Position

Provides monitoring, detection, and initial triage of cybersecurity events and alerts across the Illinois Secretary of State’s network and system infrastructure. Responsible for identifying potentially malicious or suspicious activity, documenting findings, escalating incidents when appropriate, and supporting the agency’s overall monitoring and incident response functions. Follows established procedures to review alerts generated by security tools, IT tools, and other sources.

Requirements

Requires knowledge, skill and mental development equivalent to the completion of 1 year of college, with coursework in the computer science field OR 1.5 years of technical systems and programming experience OR any equivalent combination of education and experience.
Requires sufficient oral and written communication skills for effective engagement with colleagues and internal users/customers.
Requires the use and understanding of appropriate methods, tools, applications, and processes.
Requires the demonstration of a rational and organized approach to work.
Requires sufficient digital skills for their role.
Requires the ability to seek to identify learning and professional development opportunities.
Requires awareness and adherence to organizational standards for security, privacy and ethics.
Requires the ability to follow oral and/or written instructions and to carry out routine operations, once established, without further instructions.
Requires working knowledge of systems design and implementation, including the way programs are written, compiled and tested, the methods of operating computers, and the manner in which data is transcribed into a form suitable for reading by computers.
Requires working knowledge of the devices for capturing data and the means available for receiving and transmitting data from remote locations to a computer.
Requires working knowledge of the principles and techniques of computer system documentation.
Requires willingness to travel and possession of a valid Illinois driver’s license as required by individual positions within the class.
Requires the ability to lift, carry, and push/pull 0 – 50lbs.

Responsibilities

Monitors security alerts, events, and dashboards across multiple platforms.
Reviews and triages security events to determine efficacy.
Performs initial analysis of alerts related to potential cybersecurity incident categories.
Investigates indicators of compromise using available tools, logs, threat intelligence, and documented procedures.
Documents investigations, findings, actions taken, and escalation details in ticketing systems and/or case management platforms.
Follows incident response plans, playbooks, standard operating procedures, and workflows to ensure consistent handling of security events.
Supports the identification of false positives and provides feedback to improve alert fidelity and operational procedures.
Continues education by attending training sessions, seminars, and conferences to increase familiarity with current security products, vendors, techniques, and procedures.
Monitors on-line information security related websites, blogs, articles, reports, and other security intelligence sources to keep up to date on the latest security threats and trends.
Compiles summaries and other documentation of information security as assigned.
Completes necessary education, training and certifications to stay abreast of latest technologies affecting Illinois Secretary of State information security.
Travels as necessary for education and meetings.
Performs other duties as required or assigned.