INFORMATION SECURITY ANALYST IV - 41500055

State-of-Florida; Tallahassee (FL); On-site; USD 70,000 - 80,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Retirement plans

Job summary

The Florida Gaming Control Commission seeks an Information Security Analyst IV to design, monitor, and improve enterprise cybersecurity controls. You will engage in hands-on security operations, incident response, vulnerability management, threat hunting, and cloud/identity security engineering to support the CISO and statewide reporting.

Responsibilities include logging and telemetry management, MFA/conditional access, and producing measurable security metrics.

Qualifications

• Four (4) years of professional cybersecurity operations, incident response, security engineering, and monitoring experience in a hands-on role.
• Bachelor’s degree in Computer Science, Cybersecurity, or IT-related field may substitute for the required experience.
• Experience with security monitoring, SIEM tools, and cybersecurity governance; identity management platforms, cloud environments, and endpoint security.

Responsibilities

• Monitors security events and alerts across multiple platforms; investigates potential incidents and coordinates response.
• Performs threat hunting, malware analysis, and documents steps for statutory reporting.
• Designs and maintains enterprise security controls including SIEM, IAM, and cloud security configurations.
• Ensures logging, monitoring, and telemetry systems operate effectively to detect threats.
• Oversees vulnerability management activities, prioritizes remediation, and documents metrics.
• Provides technical evidence and documentation for audits; supports CISO and leadership with dashboards.

Skills

Cloud security

IAM controls

Logging & monitoring

Threat detection

Incident response

Forensics

NIST CSF

SIEM/EDR

Vulnerability mgmt

Disaster recovery

Documentation

Leadership

Audit evidence

Education

Bachelor’s degree in Computer Science / Cybersecurity / IT

Job description

INFORMATION SECURITY ANALYST IV - 41500055

Date: Aug 21, 2026

Requisition No:882135

Working Title: INFORMATION SECURITY ANALYST IV - 41500055

Class Title: Information Security Analyst IV
Position Number:41500055

Hiring Salary: $70,000 to $80,000 – Commensurate with Experience

*** Open Competitive ***

Overview:

The Florida Gaming Control Commission is responsible for exercising all regulatory and executive powers of the state with respect to legal gaming, including pari‑mutuel wagering, cardrooms, slot machine facilities, oversight of gaming compacts, and other forms of gambling authorized by state law, excluding the Lottery, as well as directly enforcing Florida’s gaming laws and combatting illegal gambling activities.

The agency is overseen by five Commissioners who are appointed by the Governor, with Commissioners appointing an Executive Director who leads a team of more than 200 staff members. The mission of the Florida Gaming Control Commission is to preserve and protect the integrity of gaming activities through fair regulation, licensing, effective criminal investigation, and enforcement.

The Commission offers a supportive work environment that fosters growth and collaboration.

Position Duties and Responsibilities:

This position serves as the Information Security Analyst IV (ISA IV) and is responsible for the design, configuration, administration, monitoring, and continuous improvement of enterprise cybersecurity controls. This role performs hands‑on security operations, incident response, vulnerability management, threat hunting, and cloud and identity security engineering. The ISA IV provides technical execution and documented evidence that supports the Chief Information Security Officer (CISO). Duties are as follows:

• Monitors security events and alerts across multiple platforms, investigates potential security incidents, performs triage, and coordinates technical response activities to ensure timely containment and remediation;
• Conducts threat hunting activities, performs malware analysis, and documents all investigative steps in support of statutory reporting requirements;
• Designs, implements, and maintains enterprise security controls, including endpoint detection and response tools, SIEM configurations, identity and access security technologies, email security protections, multi ‑ factor authentication, conditional access policies, and cloud security configurations;
• Ensures that logging, monitoring, and telemetry systems operate effectively to detect and respond to threats;
• Manages day ‑ to ‑ day vulnerability management activities, including scanning, analysis of findings, prioritization of remediation, coordination with IT personnel, validation of fixes, and documentation of remediation metrics;
• Ensures vulnerabilities are addressed promptly and provides clear technical reporting to the CISO;
• Supports identity and access governance processes by reviewing privileged access assignments, monitoring administrative account activity, assisting with access certifications, and validating the effectiveness of identity ‑ related security controls;
• Performs technical security assessments and configuration reviews, conducts security testing for new systems and applications, supports penetration testing, and validates that required security controls have been implemented prior to deployment or production use;
• Develops and maintains technical security procedures, documentation, runbooks, and operational artifacts necessary for consistent security operations;
• Produces operational security metrics and dashboards that support agency leadership and statewide reporting requirements;
• Provides technical guidance to IT staff and project teams to ensure secure implementation of technologies across the agency;
• Supports the agency’s disaster recovery and business continuity testing by ensuring technical systems and controls are appropriately validated and capable of supporting required recovery objectives;
• Provides technical evidence and documentation required for internal and external audits, maintains inventories of security systems, and supports the CISO’s preparation of the annual comprehensive risk assessment;
• Assists in developing technical security standards and ensures accurate documentation of implemented controls;
• Prepares technical incident documentation that supports the CISO’s mandatory classification and reporting of incidents to the Cybersecurity Operations Center (CSOC) within statutory deadlines;
• Assists in preparing quarterly cybersecurity status reports and other materials for agency leadership;
• Supports the CISO’s participation in statewide cybersecurity coordination efforts;
• Assists in evidence gathering and coordination for independent audits;
• Ensures technical accuracy and completeness of all materials provided;
• Tests and maintains disaster recovery strategies;
• Works with vendors and partners on security engineering, monitoring, and posturing tasks;
• Travels to remote FGCC locations as needed to perform job‑related duties;
• Participates in after ‑ hours or on ‑ call incident response activities to ensure timely handling of critical security events; and
• Performs other related duties as assigned.

Preferred Knowledge, Skills, and Abilities:

• Knowledge of cloud security concepts and control implementation;
• Knowledge of identity and access security controls, including MFA, conditional access, and privileged access review;
• Knowledge of logging, monitoring, and telemetry architecture in enterprise environments;
• Knowledge of security assessment methodologies, configuration review practices, and remediation validation;
• Knowledge of threat detection, malware analysis, incident response, and forensics fundamentals;
• Working knowledge of the NIST Cybersecurity Framework (CSF) and its application in state government;
• Familiarity with Florida cybersecurity requirements (Section 282.318, F.S.; Rule 60GG ‑ 2, F.A.C.; FDS/CSOC reporting);
• Deep technical proficiency with SIEM, EDR, firewall, email security, and vulnerability management platforms;
• Skilled in designing, configuring, and administering enterprise security tooling;
• Skilled in investigating security events, performing triage, and documenting findings;
• Skilled in performing threat hunting and advanced analysis under time constraints;
• Skilled in prioritizing vulnerabilities, coordinating remediation, and producing measurable risk metrics;
• Skilled in producing technical documentation, reporting, and audit evidence;
• Ability to communicate technical details clearly to technical and nontechnical audiences;
• Ability to coordinate effectively with IT staff and external auditors;
• Ability to maintain composure and accuracy during security incidents and escalations;
• Ability to plan, organize, and manage multiple operational security tasks simultaneously;
• Ability to support disaster recovery and business continuity testing through technical readiness validation; and
• Ability to translate complex technical findings into concise, actionable reports.

Minimum Qualifications:

• Four (4) years of professional cybersecurity operations, incident response, security engineering, and monitoring experience in a hands‑on role in a government or enterprise environment; OR
• A bachelor’s degree in Computer Science, Cybersecurity, or an IT‑related field from an accredited college or university may substitute for the required experience.
• Experience with security monitoring, SIEM tools, and cybersecurity governance;
• Experience with identity management platforms, cloud environments, and endpoint security;
• Experience conducting or supporting risk assessments and compliance audits; and
• Experience interpreting statutory or regulatory cybersecurity requirements.

Preferred Qualifications:

• SSCP, GCIH, GCIA, CySA+, SecurityX, ECIH, CSA, or equivalent.
• Experience in government, regulatory, or law enforcement network environments.

The incumbent must be:

• Reliable and dependable.
• Strong skills in problem solving and critical thinking.
• Excellent time management skills and ability to manage multiple tasks.
• Proven interpersonal and communication skills.
• The ability to work with all levels of employees in a professional manner.
• Excellent analytical and decision‑making abilities.
• Detail ‑ oriented and capable of maintaining high ‑ quality documentation.
• Able to lead teams, facilitate meetings, and manage major agency initiatives.

Applicant’s must complete all fields in the Candidate Profile. Work history with month and year, hours worked, and formal education are required to qualify for this position. Responses to Qualifying questions must be verifiable in the Candidate Profile. Resumes and other documentation can be attached to provide additional information.

Where you will work:

This position is located in Tallahassee, FL.

Benefits of Working for the State of Florida:

Working for the State of Florida is more than a paycheck. The state offers a comprehensive compensation package for employees that features a highly competitive set of benefits including:

• Low premium health, dental, vision, life, and supplemental coverage options!
• Paid personal time that includes annual leave, sick leave, nine paid holidays, and one personal holiday!
• Paid administrative leave for mentoring, volunteering, voting, and more!
• Family planning support that includes adoption benefits and paid/unpaid leave options for family and medical responsibilities!
• Retirement plans that include employer contributions (For more information, visit www.myfrs.com)!
• Deferred compensation plans!
• FREE basic life insurance plus additional options for you, your spouse, and children!
• Flexible Spending Accounts!
• Tuition waivers!

IMPORTANT NOTICES:

• The Florida Gaming Control Commission has employment restrictions for all commission employees referenced in sections 16.713 and 16.715, Florida Statutes.
• This position requires a Level 2 background screening as a condition of employment and participation in direct deposit. You will be required to provide your Social Security Number (SSN) and/or State Issued Photo Identification to conduct this screening.

SpecialReminders:

Male applicants born on or after October 1, 1962, will not be eligible for hire or promotion unless registered with the Selective Services System (SSS) before their 26th birthday or have a Letter of Registration Exemption from the SSS. For more information, please visit the SSS website: http://www.sss.gov.

If you are a retiree of the Florida Retirement System (FRS), please check with the FRS to see how your current benefits will be affected if you are re‑employed with the State of Florida. Your current retirement benefits may be canceled, suspended, or deemed ineligible, depending upon your retirement date.

We hire only U.S. citizens and lawfully authorized alien workers. Our agency participates in the E-Verify System, a federal government electronic database that allows employers to verify the identity and employment eligibility of all persons hired to work in the United States.

The Commission is committed to increasing recruitment and hiring of individuals with disabilities and improving employment outcomes.

The Commission values the service veterans and their family members have given to our country and supports the hiring of returning service members and military spouses.

Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the FGCC Office of Human Resources by phone at [phone] or by email at [e-mail]. The FGCC requires that applicants provide notification in advance to allow sufficient time to provide the accommodation.

Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center (1-866-663-4735). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.

The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

VETERANS’ PREFERENCE. Pursuant to Chapter 295, Florida Statutes,candidates eligible for Veterans’ Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements.Candidates claiming Veterans’ Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans’ Preference documentation requirements are available by clicking here . All documentation is due by the close of the vacancy announcement.

Location:

TALLAHASSEE, FL, US, 32301 TALLAHASSEE, FL, US, 32305 TALLAHASSEE, FL, US, 32309 TALLAHASSEE, FL, US, 32311 TALLAHASSEE, FL, US, 32304 TALLAHASSEE, FL, US, 32310 TALLAHASSEE, FL, US, 32316 TALLAHASSEE, FL, US, 32307 TALLAHASSEE, FL, US, 32312 TALLAHASSEE, FL, US, 32317 TALLAHASSEE, FL, US, 32302 TALLAHASSEE, FL, US, 32303 TALLAHASSEE, FL, US, 32308 TALLAHASSEE, FL, US, 32399

For assistance, call the People First Service Center at [phone] Monday - Friday, 8:00 a.m. to 6:00 p.m., Eastern time. Pursuant to Florida Law, 110.211 F. S., the State of Florida is an EEO employer.