Information Security Analyst

Capital-Area-Intermediate-Unit; Enola (PA); On-site; USD 66,000 - 83,000; Full time

Job summary

Capital-Area-Intermediate-Unit in Pennsylvania is seeking a cybersecurity professional to perform threat analysis, incident response, and vulnerability remediation to protect digital assets. The role involves collecting data from consortium members to inform reports, plans and policies.

Responsibilities include monitoring security baselines, conducting vulnerability analyses, coordinating mitigations, incident response, disaster recovery planning, and developing governance and training programs

Qualifications

• Two-year degree or equivalent coursework completed.
• IT or security certifications preferred.
• Three years of related experience.
• Knowledge of Windows Server, Active Directory and Group Policy.
• Experience with VMware or virtualization technologies.
• Experience with enterprise firewall solutions.
• Strong knowledge of security frameworks (CIS controls).
• Knowledge of networking protocols and hardware.
• Ability to work with technical and nontechnical staff.
• Knowledge of security best practices for security, storage, and DR.
• Experience delivering training to large groups.
• Excellent communication skills.
• Leadership abilities.

Responsibilities

• Identify, monitor, resolve, and triage security issues using security tools.
• Monitor security baselines, perform vulnerability analyses, coordinate mitigation.
• Conduct incident analysis and response using SIEM, UEBA, IDS/IPS, and related tools.
• Create, deploy, and administer security solutions for CAIU and member districts.
• Coordinate disaster recovery and data recovery plan development and testing.
• Review critical backups and retention policy compliance.
• Develop and implement governance, risk, and compliance policies.
• Review protocols and standards across CAIU and member districts.
• Maintain documentation for processes, policies, and networks.
• Create documentation for evidence control and IT data.
• Train end users and CAIU districts on security best practices.
• Deliver security awareness and phishing training.
• Stay current on cybersecurity trends and ongoing education.
• Maintain confidentiality of sensitive incidents and data.
• Support projects aligned with CAIU security goals.
• Attend technology and team meetings; perform additional duties as needed.

Skills

Excellent communication

Leadership abilities

Threat analysis

Incident response

Vulnerability remediation

Disaster recovery planning

Data recovery planning

Windows Server

Active Directory

Group Policy

VMware / virtualization

Enterprise firewall

SIEM / UEBA / IDS/IPS

Training delivery

Documentation & policy

Education

Two-year college degree

Tools

SIEM

UEBA

IDS/IPS

Endpoint protection

Next-gen firewall

Active Directory management tools

VMware

Job description

Salary: $66,320.00 - $82,900.00 (depending on experience)Schedule: Monday - Friday, 7.5 hours/day, 260 days/yearJob Goal: To perform day-to-day cybersecurity threat analysis, incident response, and vulnerability remediation to ensure confidentiality, integrity, and availability of digital assets. Collect data from cybersecurity consortium members to create reports, plans and policies that support the regions cybersecurity efforts.Performance Responsibilities:1. Identify, monitor, resolve, and triage security issues when appropriate using various technical security solutions.2. Monitor system security baselines, conduct vulnerability analysis and coordinate mitigation and response for systems within the CAIU and its member districts environments.3. Conduct incident analysis and response using various technical security solutions such as Security Information and Event Management (SIEM), User Entity Behavior Analytics (UEBA), network threat analysis, Intrusion Detection System (IDS)/Intrusion Protection Systems (IPS), endpoint protection platforms, next generation firewall tools, and more.4. Create, deploy, and administer various technical security solutions for the CAIU and its member districts.5. Coordinate the ongoing development, maintenance, execution, and testing of the Disaster Recovery and Data Recovery Plans for the CAIU and its member districts. Perform regular review and testing of critical system backups in accordance with defined retention policies.6. Participate in the implementation and development of technical, governance, risk, and compliance policies and procedures to protect the CAIU and its member districts.7. Review and ensure the compliance of protocols and standards throughout the CAIU and its member districts.8. Establish and maintain a documentation library for processes, policies, as well as technical data covering systems and networks for the CAIU and its member districts.9. Create and maintain a documentation library for processes, policies, evidence control, as well as technical data covering systems and networks for the CAIU and its member districts.10. Works with end users and CAIU member districts to communicate and train on best IT security measures.11. Deliver security awareness training, support phishing awareness activities, conduct data/malware analysis.12. Maintain proficiency in cybersecurity trends and issues. Participate in continuing education in cybersecurity with a focus on vulnerability and threat identification, mitigation, incident response, and security assessment/penetration testing.13. Maintain confidentiality regarding sensitive incidents and information being processed, stored, or accessed by the network.14. Provides support for the implementation of projects that are in support of the CAIU security goals.15. Attend CAIU technology meetings as assigned and other team or CAIU meetings as requested.16. Assume any other responsibilities as assigned by Supervisor/Director of Technology or his/her designee.17. Assume any other responsibilities as assigned by the Executive Director or his/her designee.Qualifications:1. A two-year college degree or completion of a specialized course of study at a business or trade school2. IT certifications or IT security certifications preferred.3. Three years of similar or related experience, including preparatory experience.4. Knowledge of Windows server environment, Active Directory and Group Policy Management5. Working knowledge of VMWare or virtualization technologies6. Experience using enterprise firewall experience7. Strong knowledge of security frameworks, CIS controls8. Strong knowledge of software, hardware, and networking protocols9. Ability to work with technical and nontechnical staff.10. Knowledge of implementing industry best practices for security, storage, and disaster recovery protocols11. Experience in delivering training to large groups of people.12. Excellent communication skills13. Must demonstrate leadership abilities.