Cybersecurity Analyst II - Information Security​/Information Technology - Central Services

Job Title

Cybersecurity Analyst II
- Information Security/Information Technology
- Central Services

Yosemite Community College District/Central Services

Management Salary Schedule ) Range 36: $9,094 to $11,555 monthly or $9,345 to $11,806 monthly with earned Doctorate. New appointees will receive year-for-year credit for prior management experience to a maximum of Step

C.

The District currently pays for a health options for the employee and dependents. Employees may elect to pay a premium for a higher health option. Vision care and dental insurance premiums for the employee and dependents is District paid. Income protection and life insurance premiums for the employee are also District paid. The estimated cost of District provided benefits (health, dental, vision, and life) is $24,408 annually.

The Cybersecurity Analyst II is responsible for leading the analysis and responding to complex security incidents and threats. This role involves advanced threat analysis, vulnerability management, and the development of security policies and procedures. The Cybersecurity Analyst II collaborates with various IT teams and stakeholders to enhance the organization’s security posture and ensure compliance with relevant regulations.

The Cybersecurity Analyst II focuses on complex incidents, advanced threat analysis, and leadership responsibilities. This classification works independently, develops and enforces security policies, leads forensic investigations, and provides guidance to Analyst I and other IT staff. Analyst II serves as a subject matter expert, collaborating across teams to strengthen the organization’s security posture and ensure compliance with regulations and best practices.

The Cybersecurity Analyst II reports to the Chief Information Security Officer and may provide guidance to Cybersecurity Analyst I, IT staff across different divisions, end-users, and student workers.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The Education/Experience, Knowledge, and Ability requirements are representative of essential duties.

• Education:
  
  Possession of a Bachelor’s degree from an accredited College or University in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience:
  
  Three to five years of experience in cybersecurity or related roles.
• One or more certifications relating to cybersecurity preferred (e.g., CompTIA Security+, Cisco CCNA Security, Palo Alto Networks PCNSA, EC-Council CEH, or ISC2 CISSP Associate).

• Advanced principles of cybersecurity and information security.
• Advanced security tools and technologies (e.g., SIEM, IDS/IPS, EDR/XDR, firewalls).
• In-depth vulnerability assessment and management.

• Lead the analysis and response to complex security incidents.
• Develop and implement comprehensive security policies and procedures.
• Communicate advanced security concepts and best practices to technical and non-technical staff.
• Work collaboratively with IT teams and other stakeholders.

• Advanced Security Monitoring and Incident Response:
  Lead the monitoring and response to complex security incidents. Perform detailed analysis and forensic investigations to identify root causes and mitigate risks.
• Vulnerability Management:
  Conduct in-depth vulnerability assessments and scans. Develop and implement remediation plans for identified vulnerabilities.
• Threat Intelligence and Analysis:
  Analyze advanced threat intelligence and security data. Identify emerging threats and vulnerabilities and provide strategic recommendations.
• Security Policies and Procedures:
  Develop and implement comprehensive security policies, plans, procedures, and guidelines. Ensure compliance with relevant regulations and standards.
• User Training and Awareness:
  Lead security awareness training programs for employees. Promote a culture of security within the organization.
• Documentation and Reporting:
  Maintain detailed documentation of security incidents, vulnerabilities,…