Information Security Analyst (54518)

Capital Area Intermediate Unit; Enola (PA); On-site; USD 66,000 - 83,000; Full time

Job summary

Capital Area Intermediate Unit is seeking a Full-Time IT Security Specialist to perform day-to-day cybersecurity threat analysis, incident response, and vulnerability remediation to safeguard digital assets. You will collect data from cybersecurity consortium members to inform reports, plans, and policies supporting regional cybersecurity efforts.

The role covers monitoring security baselines, coordinating mitigations, and developing security solutions across CAIU and member districts, with

Qualifications

• A two-year college degree or completion of a specialized course of study at a business or trade school.
• IT certifications or IT security certifications preferred.
• Three years of similar or related experience, including preparatory experience.
• Knowledge of Windows server environment, Active Directory and Group Policy Management.
• Working knowledge of virtualization technologies such as VMware
• Experience with enterprise firewalls.
• Strong knowledge of security frameworks, CIS controls.
• Strong knowledge of software, hardware, and networking protocols.
• Excellent communication skills and leadership abilities.

Responsibilities

• Identify, monitor, resolve, and triage security issues when appropriate using various technical security solutions.
• Monitor system security baselines, conduct vulnerability analysis and coordinate mitigation and response for systems within the CAIU and its member districts environments.
• Conduct incident analysis and response using SIEM, UEBA, IDS/IPS, endpoint protection, NGFW tools, and more.
• Create, deploy, and administer various technical security solutions for the CAIU and its member districts.
• Coordinate development and testing of Disaster Recovery and Data Recovery Plans and review backups.
• Participate in governance, risk, and compliance policy development to protect CAIU and members.
• Review and ensure protocol and standard compliance across CAIU and districts.
• Maintain documentation libraries for processes, policies, and technical data.
• Work with end users and districts to communicate and train on IT security measures.
• Deliver security awareness training and phishing awareness activities.
• Maintain proficiency in cybersecurity trends and continuing education.

Skills

Communication skills

Leadership abilities

Education

Two-year college degree or equivalent

IT certifications preferred

Tools

Windows Server

Active Directory

Group Policy Management

VMware

Enterprise Firewall

Networking protocols

CIS controls

Job description

Job Details

Job Location: CAIU MAIN OFFICE - ENOLA, PA 17025

Position Type: Full Time

Salary Range: $66,320.00 - $82,900.00 Salary/year

Job Shift: Day

Job Category: Information Technology

Salary:$66,320.00 - $82,900.00 (depending on experience)

Schedule:Monday - Friday, 7.5 hours/day, 260 days/year

Job Goal:To perform day-to-day cybersecurity threat analysis, incident response, and vulnerability remediation to ensure confidentiality, integrity, and availability of digital assets. Collect data from cybersecurity consortium members to create reports, plans and policies that support the regions cybersecurity efforts.

Performance Responsibilities

• Identify, monitor, resolve, and triage security issues when appropriate using various technical security solutions.
• Monitor system security baselines, conduct vulnerability analysis and coordinate mitigation and response for systems within the CAIU and its member districts environments.
• Conduct incident analysis and response using various technical security solutions such as Security Information and Event Management (SIEM), User Entity Behavior Analytics (UEBA), network threat analysis, Intrusion Detection System (IDS)/Intrusion Protection Systems (IPS), endpoint protection platforms, next generation firewall tools, and more.
• Create, deploy, and administer various technical security solutions for the CAIU and its member districts.
• Coordinate the ongoing development, maintenance, execution, and testing of the Disaster Recovery and Data Recovery Plans for the CAIU and its member districts. Perform regular review and testing of critical system backups in accordance with defined retention policies.
• Participate in the implementation and development of technical, governance, risk, and compliance policies and procedures to protect the CAIU and its member districts.
• Review and ensure the compliance of protocols and standards throughout the CAIU and its member districts.
• Establish and maintain a documentation library for processes, policies, as well as technical data covering systems and networks for the CAIU and its member districts.
• Create and maintain a documentation library for processes, policies, evidence control, as well as technical data covering systems and networks for the CAIU and its member districts.
• Works with end users and CAIU member districts to communicate and train on best IT security measures.
• Deliver security awareness training, support phishing awareness activities, conduct data/malware analysis.
• Maintain proficiency in cybersecurity trends and issues. Participate in continuing education in cybersecurity with a focus on vulnerability and threat identification, mitigation, incident response, and security assessment/penetration testing.
• Maintain confidentiality regarding sensitive incidents and information being processed, stored, or accessed by the network.
• Provides support for the implementation of projects that are in support of the CAIU security goals.
• Attend CAIU technology meetings as assigned and other team or CAIU meetings as requested.
• Assume any other responsibilities as assigned by Supervisor/Director of Technology or his/her designee.
• Assume any other responsibilities as assigned by the Executive Director or his/her designee.

Qualifications

• A two-year college degree or completion of a specialized course of study at a business or trade school
• IT certifications or IT security certifications preferred.
• Three years of similar or related experience, including preparatory experience.
• Knowledge of Windows server environment, Active Directory and Group Policy Management
• Working knowledge of VMWare or virtualization technologies
• Experience using enterprise firewall experience
• Strong knowledge of security frameworks, CIS controls
• Strong knowledge of software, hardware, and networking protocols
• Ability to work with technical and nontechnical staff.
• Knowledge of implementing industry best practices for security, storage, and disaster recovery protocols
• Experience in delivering training to large groups of people.
• Excellent communication skills
• Must demonstrate leadership abilities.