Security Analyst

Agama Solutions•Tallahassee, FL

23h•Hybrid

About The Position

NWRDC is seeking a vendor (also referred to as "Contractor") to implement a Staff Augmentation Position for Security Analyst experience to support the NWRDC. The role involves acting as a primary liaison for daily operations between the Department and its Managed Security Services Provider (MSSP), Secureworks. The analyst will review information security policies, perform computer incident response, analyze security events and incidents, and assist with the integration of security logs and endpoint agents. The position also requires maintaining the health of MSSP-specific appliances and integrating data sources into SIEM and SOAR solutions, providing status reports to management.

Requirements

Minimum of 4 years experience working as a security analyst in an environment utilizing a Managed Security Services Provider (MSSP), preferably Secureworks.
Experience coordinating and conducting event collection, log management and event management using Security Information & Event Management (SIEM) or other log management systems.
Experience with identity monitoring activities using SIEM or other log management systems.
Experience with research and analysis of log sources utilized for security monitoring.
Experience configuring and monitoring IDS/IPS, log collectors, firewalls, load balancers, web gateways, and other network traffic physical and virtual appliances.
Experience with endpoint deployment solutions to enable installation of security products and telemetry gathering on computer workstations and servers of varying operating systems and versions. Examples include SCCM, Altiris, KACE, Ivanti, etc.
Experience in Microsoft Active Directory on-premises and Azure (hybrid) administration, including practices of account provisioning, enable/disable/reset, and management of Organizational Units and Groups.
Must have a smartphone that will support Multi-Factor Authentication (MFA).

Responsibilities

Act as primary liaison for daily operations between the Department and the Department's Managed Security Services Provider, Secureworks, as assigned by the Department.
Review current FDOH (Dept of Health) information security policies and processes to assist management with developing project goals, as assigned by the Department.
Perform computer incident response within the scope and capabilities of the MSSP; assist with computer incident response originating from sources outside the scope of the MSSP, as assigned by the Department.
Perform advanced level analysis of security events and incidents reported by the MSSP and other monitoring platforms, as assigned by the Department.
Assist the MSSP and Security Administration Team with identification and integration of all Department information security related logs, as assigned by the Department.
Assist the MSSP and Security Administration Team in deploying and health monitoring of MSSP specific endpoint agents across multiple physical and virtual IT platforms, as assigned by the Department.
Assist the Security Administration Team in deploying and health monitoring of non-MSSP specific endpoint agents across multiple physical and virtual IT platforms, as assigned by the Department.
Assist the MSSP and Security Administration Team in maintaining the health of MSSP specific log collection and IDS/IPS physical and virtual appliances, as assigned by the Department.
Assist with continuous integration of all relevant Department data sources and systems, existing or new, into the MSSP and other SIEM and SOAR solutions, as assigned by the Department.
Provide Department management with status reports on project goals, as assigned by the Department.
Comply at all times with all Department data security procedures and policies in the performance of this scope of work as specified in the Data Security and Confidentiality document attached to the purchase order.