Dover, DE - IT - DTI - Security Office - Information Security Analyst

Information Security Analyst 1 (ISA1)

Responsible for securing the state’s multi‑cloud program through design, implementation, and management of secure cloud environments, Zero Trust Network Access (ZTNA) solutions, and related security controls.

• Zero Trust Network Access (ZTNA)
  Extensive experience in ZTNA engineering, automation, policy‑driven access control, identity‑aware segmentation, and migration from traditional VPNs to ZTNA, with deep knowledge of NIST 800‑207 and Zscaler technology.
• Cloud Platform Expertise
  Comprehensive understanding of GCP, AWS, and Azure security services (IAM, security centers, firewalls, key management, logging, monitoring) and ability to design secure cloud architectures using cloud‑native security controls, CSPM tools, and compliance frameworks (NIST, ISO, SOC 2).
• Identity and Access Management (IAM)
  Proficiency in IAM best practices, including Okta, least privilege controls, federation, and SSO across multiple cloud platforms.
• Security Automation and Orchestration
  Skilled in scripting and automation tools such as Python, Terraform, Cloud Formation, Azure Resource Manager, and experience with SOAR platforms.
• Security Monitoring and Incident Response
  Experience with SIEM logging and analysis, EDR/XDR concepts, threat hunting, and incident response procedures.
• Security Policy, Compliance, and Governance
  Knowledge of federal and state compliance regulations, governance standards, and ability to implement controls to meet requirements such as FedRAMP.
• Data Security
  Understanding of data classification standards and data loss prevention (DLP) configurations.
• Network Security
  Deep knowledge of modern networking, firewalls, IDS/IPS, segmentation, VPNs, routing, switching, and tools such as Wireshark and tcpdump; experience with NAC, DNS security, load balancers, and WAFs.
• Endpoint Security
  Understanding of endpoint security concepts and technologies.

• Leadership and Communication
  Ability to lead and mentor junior engineers, communicate complex technical concepts clearly, and present to non‑technical audiences.
• Problem‑Solving and Critical Thinking
  Strong analytical skills, strategic risk anticipation, and development of effective mitigation strategies.

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• Professional certifications such as CISSP, CCSP, AWS Certified Security – Specialty, Google Cloud Certified Professional Cloud Security Engineer, Microsoft Certified:
  Azure Security Engineer Associate.

• 7–10 years of experience in information security, with emphasis on cloud security and ZTNA.
• Significant experience deploying and managing solutions on GCP, AWS, and/or Azure.
• Demonstrated implementation and management of ZTNA solutions.