Senior Cybersecurity Operations Analyst 23-E-15

Illinois Attorney General (IL); Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

Illinois Attorney General (IL) seeks a Senior Cybersecurity Operations Analyst to lead incident response efforts, coordinate containment actions, and guide improvements to security controls and processes. The role requires analyzing events from multiple tools to identify incidents and determine severity, and delivering actionable recommendations to prevent recurrences.

The position focuses on building robust incident response plans, conducting forensic analysis, and maintaining documentation.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.

Responsibilities

• Lead incident response coordination and recommend security controls.
• Analyze events from multiple security tools to identify incidents.
• Develop and maintain incident response documentation and plans.
• Provide detailed incident reports with root cause and follow-up actions.
• Stay current with emerging threats and participate in tabletop exercises.

Skills

Incident response

Security monitoring

Forensic analysis

Digital investigations

Communication skills

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

SIEM technologies

Firewalls

Intrusion detection systems

Job description

Under the direction of the Chief Information Security Officer (CISO), the Senior Cybersecurity Operations Analyst will be responsible for analyzing events from multiple security tools to identify incidents and potential information security threats to the organization. The Senior Cybersecurity Operations Analyst will conduct comprehensive and detailed analysis of network and endpoint events, to quickly determine the source and severity, and to advise on the most effective and efficient way to triage the event.

The Senior Cybersecurity Operations Analyst will identify, corelate, elevate, and respond to security incidents using various security technologies and incident response methodologies. They will act as the lead incident response handler, coordinate the response efforts, and provide recommendations on security controls, tools, and processes to prevent future incidents. The Senior Cybersecurity Operations Analyst will provide detailed reports to the CISO and/or other team members about the root cause of an incident and recommended follow-up actions. Additionally, they will develop, enhance, and maintain incident response documentation such as incident response plans, procedures, and guidelines.

The Senior Cybersecurity Operations Analyst will stay current with emerging security threats and vulnerabilities, proactively identify potential information security risks to the organization, and participate in incident response testing and tabletop exercises to ensure the organization is prepared to handle potential information security incidents.

This position requires a bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field, and a minimum of 5 years work experience in network security, incident response, or incident investigation. Experience in conducting forensic analysis and digital investigations as part of an incident response team, along with strong knowledge of network security concepts and technologies, including intrusion detection/prevention, firewalls, and SIEM technologies are highly preferred. Relevant industry certifications such as GCFA, GCIH, CISA, CISSP are a plus.

Ability to effectively coordinate, problem solve, prioritize, and collaborate along with outstanding written and verbal communication skills. Attendance and the ability to maintain satisfactory working relationships with OAG employees and the general public is required.