Information Security Analyst I

Vermont; Montpelier (VT); On-site; Full time

Job summary

The State of Vermont Digital Services Agency seeks an Information Security Analyst I to enhance its cybersecurity posture. This role involves performing endpoint security monitoring, analyzing security events, and participating in incident response. The successful candidate will ensure effective security measures across platforms, work closely with IT experts, and must hold a relevant degree or equivalent experience.

Benefits

80% State paid medical premium

Flexible Spending accounts

Two retirement savings options

Generous leave plan and paid holidays

Tuition Reimbursement

Qualifications

• Requires Bachelor's degree in computer science or four years IT experience.
• Strongly preferred certifications include CompTIA Security+, GIAC.

Responsibilities

• Conduct security event response and vulnerability assessments.
• Participate in the Cybersecurity Incident Response Team (CSIRT).
• Secure system configuration and technical troubleshooting duties.

Skills

Familiarity with SIEM solutions

Windows operating system

Linux operating system

Log analytics

Networking knowledge

Attention to detail

Education

Bachelor's degree in computer science, programming, or engineering

Four years of experience in IT including one year in information security

Tools

MITRE ATT&CK framework

NIST CSF

Job description

The State Of Vermont Digital Services Agency is looking for an Information Security Analyst! You'll conduct complete investigations by analyzing and verifying information through various investigative techniques, internal resources, and conversations/interviews with other IT experts. You will perform endpoint security monitoring, security event triage, and incident response to detect and respond to advanced threats; and provides recommendations, creates, modifies, and updates Endpoint Detection and Response and SIEM tool rules

Required skills:

• Familiarity and understanding of SIEM solutions, regular expression, Windows and Linux operating systems, active directory, and log analytics
• Understanding of security controls for common platforms and devices, including Windows, Unix, Linux and network equipment
• Basic experience in security frameworks such as the MITRE ATT&CK framework and/or the NIST CSF
• Attention to detail, good communication and organizational skills
• Networking knowledge - ports, protocols, devices, communications, etc
• Knowledge of Common Vulnerabilities and Exposures (CVE) system
• Ability/willingness to create documentation
• Good at finding different ways to present actionable decision data

Job Duties:

• Secure system configuration, vulnerability assessment, cyber event response
• Research and analysis for securing existing systems
• Security analysis for technology projects and procurements
• Technical troubleshooting
• Technical operation of security infrastructure
• Security posture reviews and security governance
• Participate on the Cybersecurity Incident Response Team (CSIRT)
• Analyzing and responding to security events/incidents, threats, vulnerabilities, and risks

Hourly rates within the Classified Bargaining Unit Pay Plan will change effective July 2, 2023. At that time, the starting rate (Step 1) for this job opening will be $26.95 per hour.

Who May Apply

This position, Information Security Analyst I (Job Requisition #47616), is open to all State employees and external applicants.

Please Note: This position is being recruited at multiple levels. If you would like to be considered for more than one level, you MUST apply to the specific Job Requisition.

Level I: 47616

Level II: 47608

If you would like more information about this position, please contact [e-mail] .
Resumes will not be accepted via e-mail. You must apply online to be considered.

Work is performed in a standard office setting, but some travel may be required for which private means of transportation should be available. Work outside of regular business hours is expected.

Minimum Qualifications

Bachelor's degree in computer science, programming, or engineering

OR

Four 4 years or more of experience in the field of information technology INCLUDING one 1 year where the primary role was in information security.

OR

Possession of one 1 or more of the following certifications Certified Information Systems Security Professional CISSP

OR

Global Information Assurance Certification GIAC. Preferred: Certification in: CompTIA Network+ CompTIA Security+ International Information Systems Security Certification Consortium ISC Systems Security Certified Practitioner SSCP Global Information Assurance Certification GIAC Information Security Certification ISC Certified Information Systems Security Professional CISSP

Preferred Qualifications

Certification in:

CompTIA Network+

CompTIA Security+

International Information Systems Security Certification Consortium (ISC)

Systems Security Certified Practitioner (SSCP)

Global Information Assurance Certification (GIAC) Information Security Certification

(ISC) Certified Information Systems Security Professional (CISSP)

Total Compensation

As a State employee you are offered a great career opportunity, but it's more than a paycheck. The State's total compensation package features an outstanding set of employee benefits that are worth about 30% of your total compensation, including:

• 80% State paid medical premium
• Dental Plan at no cost for employees and their families
• Flexible Spending healthcare and childcare reimbursement accounts
• Two ways to save for your retirement: A State defined benefit pension plan and a deferred compensation 457(b) plan
• Work/Life balance: 11 paid holidays each year and a generous leave plan; many jobs also allow for a flexible schedule
• Low cost group life insurance
• Tuition Reimbursement
• Incentive-based Wellness Program
• Qualified Employer for Public Service Student Loan Forgiveness Program

Want the specifics? Explore the Benefits of State Employment on our website.

The State of Vermont celebrates diversity, and is committed to providing an environment of mutual respect and meaningful inclusion that represents a variety of backgrounds, perspectives, and skills. The State does not discriminate in employment on the basis of race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, membership in an employee organization, family medical history or genetic information, or family or parental status. The State’s employment decisions are merit-based. Retaliatory adverse employment actions by the State are forbidden.

About the company

Vermont (/vərˈmɒnt/) is a northeastern state in the New England region of the United States.

Notice

Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at [e-mail] or 407-000-0000.

Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.

An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report . NYC applicants may request an alternative process or accommodation at [e-mail] or 407-000-0000.