IT Security Analyst , II

UNS Energy Corporation is hiring an IT Security Analyst I, II to help safeguard enterprise systems and information assets in support of critical business operations. This onsite role in Tucson, AZ combines day-to-day security administration with monitoring, incident response, and support for regulatory compliance across multiple security domains.

• Protect critical infrastructure by administering and securing enterprise systems, applications, databases, networks, and user access.
• Monitor security events, investigate suspicious activity, and perform security incident response and forensic investigations.
• Conduct vulnerability, risk, and security assessments to identify threats and strengthen the organization’s security posture.
• Evaluate and implement emerging security technologies that improve protection of company assets and operations.
• Support compliance and regulatory initiatives, including NERC CIP, SOX, HIPAA, PCI DSS, and other security requirements.
• Assist with the design, planning, testing, implementation, and administration of regulatory requirements and industry-accepted information security principles, practices, and systems.
• Evaluate the effectiveness of information security solutions and processes, including consideration of the state of world events.
• Identify security risks and exposures, determine causes of security violations, and assess and implement procedures to halt future incidents.
• Provide assistance to system users regarding information systems security matters and deliver cost-effective IT security services to business units.
• Work closely with other areas to support reliability and cohesiveness, and provide day-to-day security administration for databases (e.g., Oracle and MSSQL), e-mail applications, key business applications, and networks.
• Perform user provisioning and de-provisioning, ensure alerting and resolution for security issues and threats, and manage anti-virus, spam, and malware administration.
• Provide second-level support for the IT Help Desk and perform 24 x 7 support on a rotating basis.
• Ensure change control processes are followed and that service levels affected by changes are maintained.
• Partner with internal and external project managers to complete projects and efforts on time, and lead or participate in IT projects to provide information security expertise, guidance, or training.
• Work with internal and external auditors to implement technical aspects of regulatory and compliance/privacy controls, including Sarbanes-Oxley, NERC CIP, HIPAA, and PCI DSS.
• Coordinate with Human Resources or Legal to provide sensitive investigative or litigation hold support.
• Contribute to services for affiliates subject to the UNS Energy Code of Conduct and related Policies and Procedures.

• Security and monitoring: Identity and access management, SIEM, Security Information & Event Management and logging, intrusion detection/prevention.
• Protection and governance: Firewalls, malware protection, encryption, vulnerability management, change and security configuration audit and control.
• Infrastructure and networking: TCP/UDP, IPv4, IPv6, OSPF, VPNs (Virtual Private Networks), SSL, wireless security infrastructure, VOIP technology security.
• Databases and applications: Oracle, MSSQL, key business applications, e-mail applications.
• Tools and scripting: Power Shell.
• Frameworks and regulatory requirements: ISO, NIST, FISMA, and regulatory requirements of NERC CIP, SOX, HIPAA, PCI DSS.

• Education: High school diploma or GED required.
• Experience: Experience supporting information security, network administration, systems administration, or a related IT discipline.
• Knowledge: Security technologies such as identity and access…