Senior IT Security Analyst

Orange County Government; Orlando (FL); On-site; USD 75,000 - 101,000; Full time

Benefits offered by this job

10 paid holidays

18 days paid time off

Longevity bonus

Low-cost medical, dental, vision

Tuition reimbursement

Job summary

Orange County Government is seeking a Senior Information Security Analyst to support day-to-day security operations, manage security infrastructure, and enforce IT security policy.

The role requires experience with firewalls, IDS/IPS, risk assessments, and incident response, with oversight from the Comptroller's office. Open Date: 08/10/2026; Close Date: 08/28/2026. Benefits include holidays, PTO, and tuition reimbursement.

Qualifications

• Bachelor's degree from an accredited college or university with course work in Computer Science, Computer Engineering, Electronic Engineering, or related discipline AND six years of experience in Information Security.
• Experience with the design and configuration of a network DMZ
• Experience working with information security practices, networks, software, and hardware
• Expert knowledge of TCP/IP, common protocols and standards
• Experience with IPS/IDS systems
• Experience with security scanning tools
• Must possess and maintain a valid Florida Driver's License.

Responsibilities

• Manage security responsibilities, including firewalls, proxy systems, logging and other security devices.
• Perform risk assessments, threat assessments, vulnerability assessments, and security tests.
• Develop and implement risks, threat, and vulnerability mitigation plans.
• Create and review reports on event anomalies.
• Develop and maintain security policies.
• Raise awareness of security policies and develop corresponding procedures.
• Write and maintain technical documentation including risk and security documents, procedures, project plans, test plans, incident reports, and troubleshooting guides.
• Provide security expertise to the Comptroller’s office.
• Work with technology staff to design and implement secure technology solutions.
• Assist in the enforcement and monitoring of compliance regulations.
• Investigate and respond to security violations.
• Design and conduct training for security education and awareness programs.
• Define security requirements and review systems to determine if they have been designed to comply with established security standards. Develop new standards as necessary.
• Analyze business needs, research and recommend solutions.
• Select, evaluate, architect, design, implement, and support security devices/protocols/mechanisms/techniques and services.
• Evaluate and recommend new and emerging security products and technologies.
• Establish and manage relations with vendors and related equipment suppliers.
• This position is a member of the Comptroller’s CSIRT (Computer Security Incident Response Team).

Skills

Firewall management

Risk assessments

Incident response

Security policies

Security documentation

Vendor relations

CSIRT involvement

Networking knowledge

Verbal and written communication

Ability to work under pressure

Education

Bachelor's degree in Computer Science/Engineering

Tools

IPS/IDS

SIEM

Firewalls

WAF

Job description

OverviewThe role of Senior Information Security Analyst is responsible for performing all functions required to support day-to-day date security operations, supporting and maintaining a broad suite of information security infrastructure, accountable for security and networking infrastructure component availability and integrity, monitoring compliance with IT security policy, and coordinating investigation and reporting of security incidents. Work is performed under the direct supervision of the Information Technology Manager.

OverviewThe role of Senior Information Security Analyst is responsible for performing all functions required to support day-to-day date security operations, supporting and maintaining a broad suite of information security infrastructure, accountable for security and networking infrastructure component availability and integrity, monitoring compliance with IT security policy, and coordinating investigation and reporting of security incidents. Note: The below description may not be representative of all duties and responsibilities for this position.

Job DescriptionNote: The below description may not be representative of all duties and responsibilities for this position.

• Manage security responsibilities, including firewalls, proxy systems, logging and other security devices.
• Perform risk assessments, threat assessments, vulnerability assessments, and security tests.
• Develop and implement risks, threat, and vulnerability mitigation plans.
• Create and review reports on event anomalies.
• Develop and maintain security policies.
• Raise awareness of security policies and develop corresponding procedures.
• Write and maintain technical documentation including risk and security documents, procedures, project plans, test plans, incident reports, and troubleshooting guides.
• Provide security expertise to the Comptroller?s office.
• Work with technology staff to design and implement secure technology solutions.
• Assist in the enforcement and monitoring of compliance regulations.
• Investigate and respond to security violations.
• Design and conduct training for security education and awareness programs.
• Define security requirements and review systems to determine if they have been designed to comply with established security standards. Develop new standards as necessary.
• Analyze business needs, research and recommend solutions.
• Select, evaluate, architect, design, implement, and support security devices/protocols/mechanisms/techniques and services.
• Evaluate and recommend new and emerging security products and technologies.
• Establish and manage relations with vendors and related equipment suppliers.
• This position is a member of the Comptroller?s CSIRT (Computer Security Incident Response Team).

Required Minimum QualificationsBachelor?s degree from an accredited college or university with course work in Computer Science, Computer Engineering, Electronic Engineering, or related discipline AND six years of experience in Information Security.

• Experience with the design and configuration of a network DMZ
• Experience working with information security practices, networks, software, and hardware
• Expert knowledge of TCP/IP, common protocols and standards
• Experience with IPS/IDS systems
• Experience with security scanning tools
• Must possess and maintain a valid Florida Driver?s License.

Preferred Qualifications

• CISSP or GSEC Security certification is preferred.
• Knowledge of cloud security principles and best practices (M365 GCC).
• Experience implementing, configuring, and securing Microsoft 365 security and compliance solutions.
• Knowledge of AI security concepts, including generative AI risks, governance, and secure AI implementation.
• Familiarity with PCIDSS 4.0 standards.
• Programming / Scripting expertise desirable.

Knowledge, Abilities And/Or Skills

• Hands-on experience of operating systems and environments (MS Windows, UNIX, LINUX derivative), networking technologies, and Internet protocols.
• Understanding of attack vectors, exploits, and hacking tools.
• Experienced with security infrastructure devices/protocols/algorithms/mechanisms/techniques including routers, encryption, firewalls, WAF, IDS, IPS, SIEM, proxies/reverse proxies, DNS, VPNs, PKI, Two-Factor authentication, Radius, DDoS protection, flow monitors, packet capture tools, malware defenses.
• Experienced in secure configurations for hardware and software on laptops, desktops, servers, SAN/NAS, network, mobile/wireless devices.
• Excellent analytical, organizational, process improvement and problem-solving skills.
• Experienced in assessment and coordinating response to threat/attacks to the technology infrastructure and the supported applications/systems.
• Must have strong verbal and written communication to communicate with both technical and non-technical staff.
• Able to work under heavy pressure.
• Able to work both independently and with technology staff to accomplish multiple tasks and projects.

Application Deadline

Open Date: 08/10/2026

Close Date: 08/28/2026

This posting is subject to close without prior notice.

Salary Information

Pay Grade: C16 - From $36.02 to $48.45

FLSA Status:

Placement based on Education and Experience

Benefits

• 10 paid holidays and 1 floating holidays annually.
• 18 days paid time off per year.
• Longevity bonus based on years of service.
• 6 days of paid TERM (sick) time annually.
• Low-cost medical, dental, vision, additional life insurance.
• Free basic life, long term disability, and employee assistance for all the family members effective on day one.
• Participation in the Florida Retirement System.
• Employee assistance program includes multiple free one on one sessions with licensed counselors and online tools for legal advice, financial planning, personal life balance, etc.
• Free access to Wellworks gyms and Orange County Recreation Centers.
• Free onsite wellness coaching, including dietician and nurse.
• Tuition reimbursement program.
• Earn service time to forgive student loans.

Disclaimer: Benefits may vary for employees under collective bargaining agreements.

For more information on Benefits visit - https://www.ocfl.net/EmploymentVolunteerism/EmployeeBenefits.aspx

Veterans Preference

If you are claiming Veterans' Preference, you are responsible for providing the required eligibility documentation by the closing date of the posting. Please scan and upload a copy of your cover letter and supporting documents, to Orange County Human Resources Division via the secure Box.com folder.

Your cover letter should include the Job ID number you are applying for, the title of the position, your full name and the last 4 digits of your social security number. If you are a current employee returning from active military service, you may be eligible for promotion preference if the active military service qualifies for Veterans' Preference. Please note that Veterans' Preference applies only to a Veterans' first promotion after reinstatement or reemployment, without exception.

Educational Requirements

If your education was obtained in the United States, the County recognizes degrees or diplomas which are accredited by an agency recognized by the United States Department of Education (USDE) or the Council for Higher Education Accreditation (CHEA). If you have obtained education from a country other than the United States, your degree or diploma must be evaluated to determine the United States equivalency by a member of the National Association of Credential Evaluation Service (NACES) or the Association of International Credentials Evaluations (AICE) at your expense.

Notes

Selected candidates will be required to provide employment references and will be required to complete a pre-employment drug, physical and background check.