Sr. Information Security Analyst

Metropolitan Nashville Airport Authority; Nashville (TN); On-site; USD 84,911 - 146,140; Full time

Job summary

A regional airport authority seeks a Senior Cybersecurity Administrator to lead enterprise security services. The applicant will ensure compliance with security standards and frameworks, manage vulnerability assessments, and respond effectively to security incidents. Candidates should have a bachelor's degree and extensive experience in information security, including firewall management and risk assessment. Strong leadership is essential along with knowledge of Unix, Linux, and Windows systems. The position offers a competitive salary range of $84,911–$146,140 based on experience.

Qualifications

• 7-10 years of relevant work experience may substitute educational requirements.
• 2-4 years of experience in information security.
• Valid Class D driver's license.

Responsibilities

• Lead response to security incidents.
• Manage PCI compliance processes.
• Diagnose firewall and network issues.
• Support overall Information Security improvements.

Skills

Information security leadership

Vulnerability management

Intrusion detection/prevention

Firewall management

Threat intelligence analysis

Education

Bachelor's degree in Computer Science or related field

Tools

Unix

Linux

Windows

Job description

Job Summary: The Senior Cybersecurity Administrator is responsible for leading multiple enterprise security services while ensuring technical solutions adhere to various compliance frameworks and regulations such as Payment Card Industry-Data Security Standard (PCI-DSS), National Institute of Standards and Technology (NIST), etc. This includes assessing, planning, and implementing security measures to help protect from security breaches and attacks on the Metropolitan Nashville Airport Authority's (MNAA) computer networks and systems. Other responsibilities include but are not limited to vulnerability management, intrusion detection/prevention, firewalls, and security information and event management. Potential for on-call availability under some circumstances is required.

Accepting Applications Until Filled

Salary Range: $84,911- $146,140

*Final salary offer will be based on relevant skills and experience to the position.

• Plays a lead role in prompt and effective response to information security incidents.
• Performs analysis and response to tier II and III security relevant alerts and events.
• Successfully manages PCI compliance, which should include but not limited to, knowledge in complying with PCI standards.
• Gathers PCI related requirements and information regarding continuous compliance assurance; analyzes and evaluates needs and provides recommendations; provides documentation of requirements.
• Collects, assesses, and reports upon relevant threat intelligence / actionable security information and appropriately modifies tactical operations accordingly.
• Meets network firewall security work standards by following production, productivity, quality, customer-service, safety, security, and health standards; resolving operational problems; identifying work process improvements.
• Diagnoses and resolves issues with firewalls, virtual private network (VPN) gateways, wireless networks, and virtual local area network (VLANS).
• Analyzes firewall security requirements by studying user requirements; conducting system security and vulnerability analyses and risk assessments.
• Assesses network traffic patterns and session data for indicators of malicious activity; takes initiative to drive procedural or technical change within the enterprise environment.
• Identifies business risk and advises appropriate business contacts as required to treat such risk.
• Supports the automation and improvement of the overall Information Security posture at MNAA.
• Assists with executing remediation plans for any gaps reported in audits or recommended process improvements that effect core information security services.
• Serves as a leader in technical space, which proactively seeks out new technical solutions, identifying gaps, understanding risk-based prioritization within the greater security and risk function, etc.
• Working knowledge of Unix, Linux and Windows operating systems.
• Confirms administrative information systems by developing and conducting tests; auditing system performance.
• Supports other Security & Risk program efforts within MNAA.
• Follows all safety regulations.
• Maintains regular and on-time attendance.
• Supports MNAA’s commitment to its culture and values, including Respect, Integrity, Service and Excellence (RISE).
• Performs other duties as assigned.

Qualifications:

Required:

• Bachelors degree in Computer Science, Management Information Systems, or relevant field of study. 7-10 years of relevant work experience with minimum of a high school diploma may be considered in lieu of educational requirement
• 2-4 years of progressive experience in computing and information security, including experience with Internet technology, security technology, issue resolution and leading teams in a cross functional,
• Valid Class D drivers license

Preferred:

• Masters degree in Computer Science, Information Systems, or a related field
• CISSP, GSEC, GCIA, GCIH, GCFA, or other security related certifications