Security Analyst

Job Title: Security Analyst Job ID: 699 Client: State of Alabama Department: Information Technology Duration: 12 months Location: 301 S Ripley St, Montgomery, AL, 36130 (On-site) Position Description: This position works closely with enterprise application development, network operations, and system administration teams to ensure security of more than one IT functional area (e.g., infrastructure, development, security, data, and/or Web) across the enterprise. Assists in the development and implementation of information security and cybersecurity policies, procedures, controls, and agency specific regulations (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures, endpoint detection and response (EDR), cloud security, encryption protocols and algorithms enforcement, Wi-Fi security, and security awareness training) utilizing industry standard information security frameworks. Prepares status reports on security matters to develop security risk analysis scenarios and response procedures. Responsible for maintaining and developing the vulnerability management program. Enforcement of security policies and procedures by administering and monitoring security profiles, reviewing security violation reports and investigating security violations. Additionally, this position will provide coverage, at times, for some system administration and network operation duties. Occasion travel to various facilities within State of Alabama will be required. This position is completely on-site. Skills Required Experience working in mid-size to enterprise environments delivering effective information security and cybersecurity support. 1 - 3 years working with and implementing security controls and frameworks, such as, the National Institute of Standards and Technology (NIST) and Center for Information Security (CIS) 1 - 3 years managing endpoint detection and respondence solution 1 - 3 years administering vulnerability management solutions 2 - 5 years utilizing MS Windows or Linux operating systems 1 - 3 years analyzing and responding to information security or cybersecurity threats Skills Preferred 1 - 3 years drafting preliminary policies and guidelines on information security or cybersecurity 1 - 3 years utilizing Microsoft Compliance Center portal 1 - 3 year utilizing Microsoft 365 Defender portal 1 - 3 years using Active Directory Domain Services 1 - 3 years securing cloud environments (Azure, AWS) 1 - 3 years of advanced operating system (MS Windows, Linux) knowledge 1 - 3 years utilizing secure web gateway solutions Experience Required Technical background working with systems and network security applications. 1 - 3 years working in information security or cybersecurity roles Experience Preferred 2 - 4 years as an incident response team member 2 - 4 years in network monitoring, security information and event management (SIEM) systems, incident response actions and threat hunting 1 - 3 years administering user security awareness training program Education Required: Bachelor's degree Education Preferred: Postgraduate degree