Lead Cyber Security Analyst; Info Security Analyst III

Lead Cyber Security Analyst (Info Security Analyst III) Minimum Qualifications

Any combination of education, experience, and training equivalent to the following:
Graduation from an accredited four‑year college or university with a bachelor’s degree in a computer or information science discipline, IT/cyber security, network or IT systems administration, engineering; or a bachelor’s degree in a business or related field that has been supplemented by at least 24 credit hours of intermediate computer science coursework; plus two years of experience in information security systems, network, or cyber security work (Click on the aforementioned link to learn how Fairfax County interprets equivalencies for "Any combination, experience, and training equivalent to").

This vacancy may be underfilled at the level of Information Security Analyst II (Grade S27, $72,190 - $120,316). The employment standards for the Information Security Analyst II are:
Any combination of education, experience and training equivalent to Graduation from an accredited four‑year college or university with a bachelor’s degree in a computer or information science discipline, IT/cyber security, network or IT systems administration, engineering; or a bachelor’s degree in a business or related field that has been supplemented by at least 18 credit hours of intermediate computer science coursework;

plus one year of experience in information security systems, network security, or cyber security. Upon completion of an underfill agreement (which will require that the employee meet the employment standards stated above in addition to obtaining competencies defined by the hiring agency) the employee will be elevated to the level of Information Security Analyst III. Underfill candidates must be able to meet the minimum qualifications of the Information Security Analyst III within two years of the job announcement's closing date.

The appointee to this position will be required to complete a criminal background check to the satisfaction of the employer.

Knowledge and experience with implementing and assessing compliance with information technology and privacy protection regulation and standards such as HIPAA, PCI‑DSS, CJIS, VA Code and Federal PII protections, and other institutional technology standards and best practices defined by NIST, ISO 27000 series, OWASP, and SANS Top 20 Security Controls. Understanding and experience with network and security architecture, multiple operating system platforms, databases, web applications, and other evolving mobile and cloud technologies, to include but not limited to the following: malware inspection, traditional and application layer firewalls, VPN, identity management systems, data loss prevention, and network and host‑based intrusion detection/prevention systems.

Experience with identity management and other access controls.

Work is generally sedentary performed in a normal work environment. All duties performed with or without reasonable accommodations.