IT Security Analyst

## IT Security Analyst Apply locations:
City Halltime type:
Full time posted on:
Posted 6 Days Agojob requisition :
JR100605

Salary Range:$54,416.96 - $DISTINGUISHING CHARACTERISTICS OF WORK  Responsible for the day-to-day operations of the in-place security solutions while and the detection, analysis, containment, eradication, and recovery from security breaches detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines, and procedures as well as conducting vulnerability audits and assessments.

This skilled technical position is responsible for administering and maintaining security controls focused on network security across the City’s enterprise in accordance with existing policies, procedures, and security best practices. This skilled position will be responsible for safeguarding privileged information and prevention of unauthorized access to City-wide resources. The IT Security Analyst performs two core functions for the enterprise as follows: is expected to be fully aware of the enterprise’s security goals as established by its stated policies, procedures, and guidelines and is responsible for articulating technical security requirements, monitoring the effectiveness of the IT security controls framework, and assisting in raising security awareness and policy compliance among workforce members.

ESSENTIAL EXAMPLE OF DUTIES  The following illustrates examples of some of the essential duties and responsibilities of the IT Security Analyst. There may be other essential functions, not listed below, in order to accomplish the tasks as presented by the Supervisor.

• Contribute to the planning, design, and creation of enterprise security architecture, policies, incident response plans, business continuity, and disaster recovery plans.  
• Promote security awareness and cybersecurity goals with City staff.  
• Stay informed on IT security industry trends, emerging threats, and solutions.  
• Review, recommend, and implement security measures and enhancements.  
• Deploy, integrate, and configure new and existing security solutions.  
• Provide day-to-day support for the information security program, ensuring adherence to best practices across network, desktop, server, and mobile configurations.  
• Design and maintain security controls, and define role-based access and secure business processes.  
• Monitor security threats, systems, and network traffic, conducting vulnerability assessments and ensuring operational efficiency.  
• Respond to security incidents, collaborate across teams for resolution, and ensure CIA (Confidentiality, Integrity, Availability) of City information.  
• Administer and audit user access, defend against unauthorized access, and maintain effective malware protection.  
• Train employees in security awareness and respond to incidents with post-event analyses and remediation.  
• Perform other related duties as assigned.

KNOWLEDGE, SKILLS, AND ABILITITES  
• Extensive experience with and knowledge of Endpoint Protection, EDR, and MDR functionality.  
• Experience with firewalls and associated management tools.  
• Familiarity with Security, Education, Training, and Awareness (SETA) platforms.  
• Strong understanding of AD, IP, TCP/IP, and other network administration protocols.  
• Experience with the following access control schemes:  
• Role-based Access Control (RBAC)  
• Mandatory Access Control (MAC)  
• Discretionary Access Control (DAC)  
• Strong understanding of Microsoft Windows Server 2016, 2019, & 2022, and Windows 11 or higher.  
• Knowledge and experience in using automated tools for applying operating system, application,…