Information Technology Security Analyst

State of Illinois•Springfield, MO

2d•Onsite

About The Position

The Information Technology Security Analyst reports directly to the Deputy Chief Information Security Officer. Supports the administration, implementation, review, and improvement of cloud, endpoint, network, hardware, application, and data security practices. The State Board of Elections welcomes all and promotes workplace diversity. It is our individual traits, character, and experiences that make each of us special and unique. It is only when we bring that individualism together and work as a diverse team that we thrive. There is no place for discrimination based on race, religion, culture, sexual identity or orientation, age, or disability at the State Board of Elections.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
Prior work experience in Information Technology roles, such as system, application, or network administration.
Working knowledge of information security technologies, including endpoint, network, email, web, data loss prevention, encryption, log correlation, vulnerability management, system and application patching, and multi-factor authentication.
Experience using Center for Internet Security (CIS) Benchmark configurations to harden systems and applications.
Familiarity with cybersecurity focused frameworks such as NIST Cybersecurity Framework (CSF) and CIS Controls.
Cybersecurity certifications are required from at least one of the following globally recognized organizations: ISC2 ISACA CompTIA SANS EC-Council

Nice To Haves

2 years of experience in information security is preferred.

Responsibilities

Implements, maintains, supports, and monitors the agency's information security services and applications, including email filters, web proxies, web application firewalls, network firewalls, intrusion prevention systems, SIEM, endpoint security, mobile device management, multi-factor authentication, client access, secure browser, threat intelligence resources, vulnerability management, etc.
Monitors system dashboards and logs for threat indicators.
Analyzes data and performs incident response procedures.
Assists with the continuous improvement of SOAR and incident response capabilities.
Supports and monitors the agency's vulnerability and compliance assessment program.
Conducts cloud, network, system, and application vulnerability and compliance assessments.
Utilizes CIS benchmark configurations and works with agency stakeholders to help drive system and application hardening efforts.
Ensures patching and remediation efforts comply with agency service level agreements.
Documents violations and provides reports to management.
Reviews and responds to information received concerning threat events from end users, federal, state, county and local agencies as well as external association entities such as ISACs, trusted security vendors, law enforcement agencies, and public information sources.
Monitor, tune, and investigate alerts from enterprise data-loss prevention and cloud security platforms to detect, prevent and remediate unauthorized exfiltration or exposure of sensitive data.
Partner with teams to identify, classify and tag sensitive data assets across on-premise and cloud storage environments.
Interacts with SBE staff on security and compliance issues.
Responds to report requests and provides analytical context.
Provides a high level of customer service to agency staff, state, county, and local election officials.
Coaches staff on secure practices and principles.
Ensures service desk queues and incidents are handled in an appropriate and timely manner.
Service desk ticket resolutions are thoroughly documented and knowledge base articles are maintained.
Continues education by attending training sessions, seminars, and conferences to increase familiarity with and maintain current knowledge of security products, vendors, techniques, and procedures.
Research security enhancements and make recommendations to management.
Participates in cybersecurity-focused organizations.
Monitors on-line information security related websites, blogs, articles, reports as well as other security intelligence sources to keep up-to-date on the latest threats, IOCs and trends.
Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.
Provides off-hours support as required.

Benefits

Competitive Group Insurance benefits including health, life, dental and vision plans
Flexible work schedules (when available and dependent upon position)
10 -25 days of paid vacation time annually (10 days for first year of state employment)
12 days of paid sick time annually which carryover year to year
3 paid personal business days per year
13 paid holidays per year
12 weeks of paid parental leave
Pension plan through the State Employees Retirement System
Deferred Compensation Program – voluntary supplemental retirement plan
Optional pre-tax programs -Medical Care Assistance Plan (MCAP) & Dependent Care Assistant Plan (DCAP)
Tuition Reimbursement Program and Federal Public Service Loan Forgiveness Program eligibility