Cybersecurity Threat & Incident Response Analyst

Capital-Area-Intermediate-Unit; Enola (PA); On-site; USD 66,000 - 83,000; Full time

Job summary

Capital-Area-Intermediate-Unit in Pennsylvania is seeking a cybersecurity professional to perform threat analysis, incident response, and vulnerability remediation to protect digital assets. The role involves collecting data from consortium members to inform reports, plans and policies.

Responsibilities include monitoring security baselines, conducting vulnerability analyses, coordinating mitigations, incident response, disaster recovery planning, and developing governance and training programs

Qualifications

• Two-year degree or equivalent coursework completed.
• IT or security certifications preferred.
• Three years of related experience.
• Knowledge of Windows Server, Active Directory and Group Policy.
• Experience with VMware or virtualization technologies.
• Experience with enterprise firewall solutions.
• Strong knowledge of security frameworks (CIS controls).
• Knowledge of networking protocols and hardware.
• Ability to work with technical and nontechnical staff.
• Knowledge of security best practices for security, storage, and DR.
• Experience delivering training to large groups.
• Excellent communication skills.
• Leadership abilities.

Responsibilities

• Identify, monitor, resolve, and triage security issues using security tools.
• Monitor security baselines, perform vulnerability analyses, coordinate mitigation.
• Conduct incident analysis and response using SIEM, UEBA, IDS/IPS, and related tools.
• Create, deploy, and administer security solutions for CAIU and member districts.
• Coordinate disaster recovery and data recovery plan development and testing.
• Review critical backups and retention policy compliance.
• Develop and implement governance, risk, and compliance policies.
• Review protocols and standards across CAIU and member districts.
• Maintain documentation for processes, policies, and networks.
• Create documentation for evidence control and IT data.
• Train end users and CAIU districts on security best practices.
• Deliver security awareness and phishing training.
• Stay current on cybersecurity trends and ongoing education.
• Maintain confidentiality of sensitive incidents and data.
• Support projects aligned with CAIU security goals.
• Attend technology and team meetings; perform additional duties as needed.

Skills

Excellent communication

Leadership abilities

Threat analysis

Incident response

Vulnerability remediation

Disaster recovery planning

Data recovery planning

Windows Server

Active Directory

Group Policy

VMware / virtualization

Enterprise firewall

SIEM / UEBA / IDS/IPS

Training delivery

Documentation & policy

Education

Two-year college degree

Tools

SIEM

UEBA

IDS/IPS

Endpoint protection

Next-gen firewall

Active Directory management tools

VMware

Job description

Capital-Area-Intermediate-Unit in Pennsylvania is seeking a cybersecurity professional to perform threat analysis, incident response, and vulnerability remediation to protect digital assets. The role involves collecting data from consortium members to inform reports, plans and policies.

Responsibilities include monitoring security baselines, conducting vulnerability analyses, coordinating mitigations, incident response, disaster recovery planning, and developing governance and training programs