Information Security Analyst

JOB SUMMARY The Information Security Analyst I is responsible for monitoring and responding to security events, investigating vulnerability reports, planning and participating in system security reviews and audits, installing security software, configuring security products, assisting with platform upgrades, and supporting the day-to-day information security operations. Candidates should possess general knowledge of MS Windows domain environment administration, incident response, vulnerability scanning, script reading, network design principles, and virtualization technology.

This is a technical, internal-facing role that requires a combination of communication skills, problems solving skills, and technical aptitude.

IDEAL CANDIDATE Our ideal candidate is an early career professional with an information security background, or someone who has worked in a technical capacity in IT services. We are searching for a skilled technician and require someone with excellent technical and communication skills who can help solve complex information security problems and minimize risk for Colorado PERA. Our Ideal Candidate will have the following skills:

Demonstrated working experience in an IT discipline supporting any of Windows Active Directory, networking, security, virtualization, help desk, or other IT discipline.

Experience configuring devices and services for compliance with organizational security standards.

Familiar with reading and understanding configuration documents, security alerts, and log data. Comfortable proactively responding to security incidents.

Experience configuring and testing platform upgrades or performing new software rollouts.

Demonstrated ability to be resourceful, make sound decisions, balance multiple initiatives, and drive issue to closure.

Passion for information security in practice and a general desire to continuously learn and understand varying aspects of IT and technology.

ESSENTIAL DUTIES AND RESPONSIBILITIES Employees are held accountable for all duties of the job. Individuals must be able to perform these duties with or without reasonable accommodations.

Responds to information security alerts originating from systems including SIEM, Firewall/Proxy, AV/EDR tools, IDS/IPS tools, E-mail security gateways, password vaults, and other systems as needed.

Assists with management and onboarding of new vendors into VRM portal. Addresses stakeholder concerns, conducts IRQ assessments, and facilitates vendor management throughout the VRM process.

Administers key technology within the information security program, acting as the first line of contact for platform user support. Assists users and administrators with investigations and incident response.

Effectively troubleshoots applications, servers, and key information security services to maintain IT security posture. Writes knowledge articles detailing results of troubleshooting or investigations.

Maintains and troubleshoots access management systems including assisting with upgrades and new feature planning. Serves as the backup to senior staff helping manage tasks related to PAM.Assists with GRC tasks including audit review, data governance review, access review, and compliance.

Patches, maintains, and supports key information security systems under the guidance of senior staff.

Evaluates and mitigates security vulnerabilities, remains conscious of security posture improvements, and understands how to escalate security issues.

Participates in DR test processes, learning about DR principals and procedures in use ks for opportunity to improve confidentiality, integrity, and availability in all supported systems.

Assists, under direction of senior staff, in projects, system integrations, and application upgrades.

Participates in vendor security reviews, identifying and resolving issues with vendor solutions or configurations.

Able to research and test work independently, seeking guidance from colleagues only after making conclusions and gathering evidence. Assists internal stakeholders with evidence gathering and analysis tasks.

Performs other duties as assigned.

JOB QUALIFICATIONS Degree in technical (STEM) field or one year experience in technical role.

Experience working with systems and software within assigned technology domain preferred.

Knowledge of Windows operating systems, Linux operating systems, server administration, desktop administration, troubleshooting, and user support preferred.

Proven knowledge of administration tasks, including user/group/role…