Security Analyst II/III — Incident Response & Cyber Defense

Gaston County Government; Gastonia (NC); On-site; USD 70,000 - 83,000; Full time

Benefits offered by this job

Health Insurance

Dental and Vision Insurance

Retirement Savings Plans

401K with county contribution

Flexible Work Schedules

Professional Development Opportunities

Job summary

Gaston County Government is seeking a Security Analyst II/III to help protect county information assets and deliver secure IT services across departments.

The role focuses on monitoring, incident response, vulnerability management, and ongoing security improvements in alignment with NIST, HIPAA, CJIS, and other standards. A relevant degree and cybersecurity certifications are required.

Qualifications

• Bachelor's degree with 8+ years of IT experience, including 3+ years in cybersecurity.
• Or Associate's degree with 10+ years of IT experience, including 3+ years in cybersecurity.
• At least one cybersecurity-focused certification (e.g., Security+, CySA+, CASP+, CISSP, or equivalent).
• Valid Driver's license.

Responsibilities

• Alert and Incident Response: Monitor, investigate, and respond to cybersecurity alerts and incidents across multiple environments.
• Security Engineering and Hygiene: Implement and improve security controls across Microsoft 365, Entra ID, AD, and endpoints.
• Vulnerability Management: Identify, prioritize, and coordinate remediation of vulnerabilities with IT teams.
• Security Awareness, Audits, and Compliance: Support governance, audits, and regulatory requirements (NIST, HIPAA, CJIS).

Education

Bachelor's degree with 8+ years of IT experience, including 3+ years in cybersecurity-related roles.

Associate's degree with 10+ years of IT experience, including 3+ years in cybersecurity-related roles.

Job description

Gaston County Government is seeking a Security Analyst II/III to help protect county information assets and deliver secure IT services across departments.

The role focuses on monitoring, incident response, vulnerability management, and ongoing security improvements in alignment with NIST, HIPAA, CJIS, and other standards. A relevant degree and cybersecurity certifications are required.