Security Analyst - 0340

Military, Veterans and Diverse Job Seekers; Stafford (VA); In loco; USD 70.000 - 95.000; Tempo pieno

Descrizione del lavoro

The Security Analyst at County performs complex technical work to protect the County's digital assets from unauthorized access. Responsibilities include monitoring security operations, incident response, vulnerability tracking, phishing simulations, and supporting policy implementation to improve security, compliance, and audit readiness.

You will work with the Cyber Security Team in a fast-paced environment, handling time-sensitive materials, maintaining confidentiality, and collaborating with

Competenze

• Deep understanding of cyber security principles and controls.
• Knowledge of regulatory frameworks (NIST CSF/800-53, CJIS, HIPAA, PCI).
• Familiarity with networks, Windows servers, and Active Directory.

Mansioni

• Investigates potential security policy or controls violations.
• Analyzes security events to determine root causes and documents findings.
• Supports disaster recovery planning and vulnerability management.
• Assists with regulatory compliance efforts (PCI-DSS, CJIS, HIPAA).
• Installs and maintains encryption, anti-virus, and other security controls.
• Operates SIEM and investigates event logs.
• Trains users on security awareness and best practices.

Conoscenze

Cyber security

Regulatory compliance

Network security

Windows/AD

Risk assessment

Communication

Descrizione del lavoro

The Security Analyst performs difficult technical work, ensuring that the County's digital assets are protected from unauthorized access. This involves executing Security Operations tasks, including monitoring the enterprise security posture, phishing simulations, vulnerability tracking, incident response, security awareness training, and supporting the implementation of policies, standards, controls, and guidelines to improve security, compliance, and audit posture. The Security Analyst works as a collaborative and supportive member of the Cyber Security Team to implement security measures and best practices. This individual must be capable of working in a fast-paced environment with time-sensitive materials, show initiative, self-motivation, and attention to detail, and maintain strict confidentiality due to the nature of the work. Work is performed under regular supervision.

Examples of Duties

• Investigates reports of potential security policy, standards, and/or controls violations;
• Analyzes security breaches to determine their root causes and prepares reports that document security breaches and any damage caused;
• Collaborates to create, test, and implement network disaster recovery plans;
• Assists with performing risk assessments, internal and external vulnerability scans;
• Supports the management of network, intrusion detection, and prevention systems;
• Works with outside entities, IT personnel, and internal departments to remediate discovered vulnerabilities;
• Assists with meeting and maintaining regulatory compliance with PCI-DSS, CJIS, HIPAA, etc.;
• Installs and administers data encryption, anti-virus, and other security measures;
• Operates SIEM tuning, administering and investigating event logs;
• Collaborates to develop, implement, and update security policies and best practices;
• Assists with patch management and network equipment upgrades;
• Trains users and promotes security awareness;
• Performs other duties as assigned.

Typical Qualifications

• Deep understanding of cyber security principles, including firewalls, intrusion detection systems, anti-virus software, data encryption, vulnerability scanners, MFA, and other industry-standard techniques and practices;
• Knowledge of regulatory compliance frameworks (NIST CSF & 800-53, CJIS, HIPAA, PCI, etc.);
• Knowledge of current security threats, techniques, and landscape (threat vectors);
• Thorough knowledge of network operations (LAN, WAN, SAN, VPN);
• Strong understanding of Windows servers and Microsoft Active Directory;
• Ability to manage multiple projects with competing priorities;
• Ability to quickly and easily adapt to changing organizational needs;
• Strong written and verbal communication, interpersonal, customer service and problem-solving skills, with the ability to present ideas in business-friendly and user-friendly language;
• Ability to achieve desired results while working collaboratively in a team environment;
• Ability to work effectively with a wide range of individuals including developers, systems administrators, executives, customers, regulators, auditors, etc.