IT Security Analyst

City of Deerfield Beach•Usa, FL

About The Position

The IT Security Analyst safeguards privileged information and prevents unauthorized access to City-wide resources. The position works independently under limited supervision and reports major activities through periodic meetings. The analyst administers and maintains logical and physical security controls focused on enterprise network security in accordance with government mandates, regulations, and industry best practices. The role also supports IT with LAN/WAN issues related to security solutions and helps assess, improve, document, and communicate security processes and systems. The position may be assigned additional duties related to the class. Other duties, responsibilities, and activities may change or be assigned at any time with or without notice. The role requires a valid telephone number, the ability to attend meetings away from the primary work location, and the ability to work overtime or alternate hours as needed. During emergencies, City employees may be called to work and are expected to perform assigned emergency service duties.

Requirements

Associate’s degree in Computer Science, Information Technology, Project Management, or a closely related discipline.
Two years of professional experience working with switches, routers, firewalls, or DMZ configuration, or an equivalent combination of education, training, and experience.
CompTIA Security+ certification or equivalent.
CompTIA Cybersecurity Analyst (CySA+) certification or equivalent.
Valid state driver’s license with an acceptable driving history, which must be maintained.
Knowledge of Next-Gen firewall administration.
Knowledge of DMZ configuration and administration.
Knowledge of enterprise network systems, tools, technologies, and administration.
Knowledge of LAN and WAN technology, with expertise in Ethernet.
Knowledge of penetration testing processes.
Experience with security monitoring equipment and reporting.
Ability to manage multiple tasks or projects, analyze and resolve complex technical and business problems independently and in a team environment.
Strong written, verbal, and non-verbal communication skills and strong interpersonal skills, including the ability to communicate effectively with diverse individuals and constituencies.
Knowledge of project management, project mapping, and change management processes.
Ability to prepare technical reports, analyses, and documents.
Ability to identify problems logically and develop or research solution options creatively using diverse sources.
Ability to use deductive and inductive reasoning, develop innovative solution options, understand multiple ideas, and build consensus.
Ability to learn advanced techniques for specific equipment and software applications.
Ability to plan, coordinate, and direct activities among team members, managers, supervisors, and directors as required, and manage team resources to complete assigned tasks.
Good organizational skills and excellent customer service skills.
Ability to prioritize workload and complete tasks in a timely manner.
Ability to develop detailed project planning documents.
Ability to identify, analyze, and correct system problems.
Ability to understand administrative and technical manuals, reports, and other correspondence.
Skill in making effective formal presentations.
Skill in flowcharting and using Visio or other process-charting software.
Must maintain a valid telephone number.
Ability to attend meetings at locations other than the primary work location.
Ability to work overtime or alternate hours as necessary for efficient department operations.
Ability to interact effectively and maintain relationships with the general public, City officials, vendors, and other City employees.
Ability to perform sedentary work involving walking or standing some of the time, exerting up to 50 pounds of force on a regular and recurring basis, or sustained keyboard operations.

Nice To Haves

Network+ certification.
Fortigate Network Security Expert (NSE) 4 certification.
Certified Information Systems Security Professional (CISSP) certification.
Certified Information Security Manager (CISM) certification.

Responsibilities

Monitor and manage the Next-Gen firewall and DMZ.
Monitor, analyze, and respond to SIEM alerts from monitoring tools, vendors, and third parties.
Ensure security best practices and configurations are incorporated into network, desktop, server, wireless, VoIP, and mobile configurations.
Design, document, and maintain security controls documentation.
Work with other departments to define role-based access control and segregation of duties, and to implement secured business processes.
Respond to escalated security tickets and collaborate across teams to communicate and manage expectations during issue resolution.
Assist with incident response for security-related incidents.
Maintain vendor management standards, questionnaires, and documentation to support compliance.
Monitor security threats, analyze vulnerability assessments, and balance security with business rules and needs.
Assist with computer forensics, penetration testing, and other security testing activities.
Perform security assessments of internal processes and systems and recommend mitigating actions.
Support, maintain, and monitor endpoint security operations, including malware protection and the effectiveness of controls.
Research and evaluate security products and features, conduct pilot deployments, and recommend improvements to existing controls.
Provide LAN/WAN support to IT to resolve technical challenges related to implementing security solutions.
Review and analyze the effectiveness and efficiency of existing systems and develop strategies to improve or further leverage them.
Prepare and deliver reports, recommendations, or alternatives addressing existing and potential operational security issues.
Perform cost-benefit and return-on-investment analyses for proposed systems to support management implementation decisions.
Ensure compatibility and interoperability of in-house computing systems without compromising security.
Provide orientation and training to end users for modified and new user security systems.
Create documentation and test resulting processes; assist with transitions using change management tools.
Contact vendors, manufacturers, and support lines regarding products.
Stay current on digital trends, cybersecurity threats, industry best practices, and upcoming government mandates.
Administer and maintain enterprise logical and physical security controls focused on network security in accordance with government mandates, regulations, and industry best practices.
Comply with established safety policies, procedures, training, and safe work practices; maintain required personal protective equipment and report unsafe conditions or work practices and on-the-job injuries or illnesses.
Perform assigned emergency service duties when called upon during disasters or other emergency situations.