Senior Cyber Security Analyst

Chisago County•Chisago Lake Township, MN

6h•$39 - $52•Onsite

About The Position

Contributes to the fulfillment of the County mission and vision by planning, designing and maintaining programs, policies, and management systems in all facets of network security systems, in support of information technology and software application initiatives across the County systems. This position works collaboratively with management and staff to achieve system objectives. Under general direction, the position performs all procedures necessary to protect systems and data from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs, prepares and recommends draft procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security. Conducts accurate evaluation of the level of security required.

Requirements

A minimum of 6 years of progressive experience in Information Systems is required, with at least 2 years of cyber security administration experience or cyber security analyst preferred.
Graduation from high school or equivalent.
Requires a minimum of a two-year certificate in, computer science, cyber security, or related field, and 4 years of experience or: Seven years of progressive experience in work related directly to Network Security, Microsoft networking, PC’s and related technologies; or a combination of experience and college to equal 6 years.
Must possess strong knowledge of information security management and practice; strong knowledge of applicable laws, regulations, guidelines and professional standards for systems security; strong project management skills; good communication skills; change management skills; demonstrate personal traits of a high level of motivation; team orientation; professionalism; trust; and place a high value on treating others with dignity and respect.

Nice To Haves

at least 2 years of cyber security administration experience or cyber security analyst preferred

Responsibilities

Works with professionalism, integrity, respect and innovation as a member of the Security Services team within IT Services to deliver service to our customers.
Develops and maintains security systems and practices to protect the integrity, accuracy, confidentiality and recoverability of data and information across County.
Develops, coordinates, and manages security practices standardization, business continuation, service, and security methods, approaches, policies and procedures across the County systems.
Works in conjunction with other DES staff to evaluate security for new application systems.
Assists in coordinating and conducting security risk assessments to identify risks and potential corrective actions. Participates in development of procedures necessary to ensure the safety of information systems, assets, and to protect systems from intentional or inadvertent access or destruction.
Provide guidance to technical and non-technical staff on cybersecurity best practices.
Communicates directly to DES Management to assist in coordinating security issues impacting or conflicting with Local, State, Federal privacy regulations. Researches, communicates and implements local, state and federal statutes as they relate to confidentiality and security of patient information, electronic attestation, and other regulations that impact the hardcopy and online storage and protection of information.
Monitors systems, logs, and alerts suspicious activities, policy violations, malware, or intrusion attempts. Analyze security events to determine impact, scope, and root cause using established incident response frameworks. Identify indicators of compromise (IOCs) and perform triage on potential security incidents.
Performs periodic vulnerability scans and assessments; analyze results and track remediation. Collaborate with system owners to ensure timely patching based on risk severity. Maintain awareness of emerging threats, exploit trends, and security advisories.
Maintain, tune, and troubleshoot security platforms including SIEM, endpoint protection, IDS/IPS, and identity monitoring solutions. Assist with deployment of new security technologies and enhancements to existing controls.
Execute the phases of incident response, including forensic identification, containment, eradication, recovery, and post incident analysis, aligning with organizational IRP and CSIRT procedures. Document incidents, actions taken, and lessons learned; support forensic investigations when required. Coordinate with cross functional teams to manage incident communication and resolution.
Other duties as assigned.