Senior Cyber Security Analyst Job Center City Minnesota USA,IT/Tech

JOB TITLE:

Senior Cyber Security Analyst POSITION STATUS:
Full-time, Appointed, Non-union

REPORTS TO:

IT Services Manager/DES Management

JOB LOCATION:

Chisago County Government, Center City MN

Contributes to the fulfillment of the County mission and vision by planning, designing and maintaining programs, policies, and management systems in all facets of network security systems, in support of information technology and software application initiatives across the County systems.

NATURE AND SCOPE:

This position works collaboratively with management and staff to achieve system objectives. Under general direction, the position performs all procedures necessary to protect systems and data from intentional or inadvertent access or destruction. Interfaces with user community to understand their security needs, prepares and recommends draft procedures to accommodate them. Ensures that user community understands and adheres to necessary procedures to maintain security.

Conducts accurate evaluation of the level of security required.

SUPERVISION RECEIVED:

Works under the general direction of the IT Services Manager/DES Management

SUPERVISION EXERCISED:

None.

PRINCIPLE

ACCOUNTABILITIES :

Works with professionalism, integrity, respect and innovation as a member of the Security Services team within IT Services to deliver service to our customers.

Develops and maintains security systems and practices to protect the integrity, accuracy, confidentiality and recoverability of data and information across County.

Develops, coordinates, and manages security practices standardization, business continuation, service, and security methods, approaches, policies and procedures across the County systems.

Works in conjunction with other DES staff to evaluate security for new application systems.

Assists in coordinating and conducting security risk assessments to identify risks and potential corrective actions. Participates in development of procedures necessary to ensure the safety of information systems, assets, and to protect systems from intentional or inadvertent access or destruction.

Provide guidance to technical and non-technical staff on cybersecurity best practices.

Communicates directly to DES Management to assist in coordinating security issues impacting or conflicting with Local, State, Federal privacy regulations. Researches, communicates and implements local, state and federal statutes as they relate to confidentiality and security of patient information, electronic attestation, and other regulations that impact the hardcopy and online storage and protection of information.

Monitors systems, logs, and alerts suspicious activities, policy violations, malware, or intrusion attempts. Analyze security events to determine impact, scope, and root cause using established incident response frameworks. Identify indicators of compromise (IOCs) and perform triage on potential security incidents.

Performs periodic vulnerability scans and assessments; analyze results and track remediation. Collaborate with system owners to ensure timely patching based on risk severity. Maintain awareness of emerging threats, exploit trends, and security advisories

Maintain, tune, and troubleshoot security platforms including SIEM, endpoint protection, IDS/IPS, and identity monitoring solutions. Assist with deployment of new security technologies and enhancements to existing controls.

Execute the phases of incident response, including forensic identification, containment, eradication, recovery, and post incident analysis, aligning with organizational IRP and CSIRT procedures. Document incidents, actions taken, and lessons learned; support forensic investigations when required. Coordinate with cross functional teams to manage incident communication and resolution.

Other duties as assigned.

DISCLOSURE STATEMENT:

The above statements reflect the general details considered necessary to describe the essential functions of the job as identified and shall not be considered as a detailed description of all work requirements that may be inherent in the position.

QUALIFICATIONS:

Experience

A minimum of 6 years of progressive experience in Information Systems is required, with at least 2 years of cyber security administration experience or cyber security analyst preferred.

Education

Graduation from high school or equivalent.

Requires a minimum of a two-year certificate in, computer science, cyber security, or related field, and 4 years of experience or:

Seven years of progressive experience in work…