Security Analyst II

Overview

The State of Wisconsin DOC is seeking a Security Analyst II.

Note:
Must be a Wisconsin resident. No relocation provided.

This position offers remote work after the initial orientation period.

At least 2 years of experience are required in the following areas:

• Understanding of NIST Cybersecurity Framework, NIST RMF, and other common security standards.
• Working knowledge of security frameworks and control theories, including NIST, CJIS, and ISO standards.
• Experience creating and leading discussions regarding the implementation and artifact collection of NIST 800-53 controls.
• Proficiency in triaging and analyzing cybersecurity alerts using enterprise technologies.
• Familiarity with phishing mitigation strategies and email threat analysis.
• Incident Response Forensics and Remediation (e.g., Crowdstrike, Sandbox evaluation, Phish evaluation, Malicious Intent Identification).
• Customer service skills related to security incident management and user communication.
• Excellent technical writing and documentation skills (incident reports, playbook development).
• Ability to work independently and within a distributed team.

• Capability to tune and optimize SIEM rules and detection logic.
• Strong interpersonal communication skills for explaining complex topics to non-technical audiences.
• Experience working on projects to improve business needs.
• Experience supporting endpoint, network, and cloud-based security controls in large-scale environments.
• Demonstrated ability to adapt to emerging threats and evolving operational needs.

• Providing risk assessment and compliance support.
• Leading or participating in audits and analyzing risks.
• Monitoring corrective actions and drafting risk reports with metrics.
• Assessing and documenting IT operational processes to align with regulatory compliance.
• Detecting, analyzing, and responding to cybersecurity threats.
• Participating in forensic investigations and vulnerability management.
• Supporting cloud security initiatives, tabletop exercises, and developing response procedures.

• Interview Process: Panel interview via Teams (video and audio).
• Duration:
  Through June 30, 2027, with the possibility of extension.
• Work Arrangement:
  Hybrid remote. Remote daily work with the ability to report to the Madison office for training or emergency situations. Must be a WI resident. No relocation allowed. Position will be 100% remote after training.