Information Security Analyst I or II

Job Description - 533007.Information Security Analyst I or II (IT 00001H)

533007.Information Security Analyst I or II - ( IT 00001H )

Under the general direction of the Senior Manager of Information Security, the Information Security Analyst I or II is responsible for supporting key vulnerability management and security information event management functions. This role involves identifying, analyzing, and remediating potential environmental threats, requiring a solid understanding of current and emerging vulnerabilities and threats in the security industry, as well as key business and technological processes.

The Information Security Analyst I or II performs essential client-facing managed security services activities.

SUPERVISES OTHERS: NO

FLSA STATUS: EXEMPT

COMPENSATION:
Analyst I ($87,615 - $100,757 Based on Experience), Analyst II ($91,615 - $105,257 Based on Experience)

• Assisting in the detection and response to security incidents by following established protocols to mitigate risks and restore security.
• Performing routine vulnerability scans and assessments to identify potential weaknesses in the organization's systems and networks.
• Participating in internal and external security audits to ensure compliance with security policies and regulatory requirements.
• Maintaining detailed documentation of security incidents, findings from audits, and vulnerability assessments, and generating reports for management.
• Assisting in developing and delivering security awareness training for employees to promote best practices in information security.
• Helping to implement and enforce security policies, procedures, and guidelines within the organization.
• Staying up-to-date with the latest security threats, vulnerabilities, and technology trends to inform security practices.
• Working closely with other IT and security team members to enhance the organization's overall security posture.
• Providing support for security tools and technologies, including firewalls, intrusion detection systems, and antivirus software.

This list is not intended to be all-inclusive, and you may not be responsible for every item listed. The employer reserves the right to assign additional functions and responsibilities as necessary.

Self-Management: Manages own time, priorities, and resources to achieve goals.

Technical Focus: Maintaining up-to-date knowledge within one's field of expertise;
Applying technical skills and knowledge.

Problem Solving: Having the ability to identify problems and issues of varying complexities and to find effective solutions with few guidelines.

Teamwork: The ability to function effectively within a team, contributing positively to collaborative efforts and achieving shared goals by demonstrating communication, collaboration, active listening, conflict resolution, and adaptability to different perspectives while respecting the roles and contributions of others. At times takes lead and positively influences others.

• In the event of an emergency or disaster that impacts the Hillsborough County Aviation Authority (HCAA), an employee may be required to respond promptly to duties and responsibilities as assigned by the employee’s department or the HCAA Emergency Operations Center (EOC). Such assignments may be before, during, or after the emergency/disaster.
• Complies with all HCAA Policies, Procedures, and Standards.

Associate’s Degree in Information Systems, Computer Science, Management Information Systems, Computer Engineering, or a related field.

Analyst I - One (1) year experience;
Analyst II - Two (2) years of security knowledge and technical experience in a diverse range of IT systems – specifically with PCI compliance, logging solutions, vulnerability management solutions, Microsoft enterprise technologies, Cisco enterprise technologies, and Redhat Linux technologies, PCI compliance, logging solutions, vulnerability management solutions.

At least one technical certification obtained in the last three years from the following organizations:
Cisco, Microsoft, or CompTIA. Or equivalent combination of…