Information Security Analyst - ITS3

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections where posting has real specific content. We need to extract relevant info. We must not repeat job title as heading. No Job ID etc. Remove boilerplate. We need to preserve all substantive info. Let's parse posting: - Working Title: Information Security Analyst (title) - Job Class: Information Technology Specialist 3 - Agency: Minnesota IT Services - Job ID: 96991 (ignore) - Location: St. Paul - Telework Eligible: Yes - Full/Part Time: Full-Time - Regular/Temporary: Unlimited - Who May Apply: Open to all qualified job seekers - Date Posted: 09/16/2026 - Closing Date: 09/29/2026 - Hiring Agency/Seniority Unit: Minnesota IT Services Division/Unit: Office of Enterprise Technology - Work Shift/Work Hours: Day Shift - Days of Work: Monday - Friday - Travel Required: No - Salary Range: $33.96 - $55.83 / hourly; $70,908 - $116,573 / annually - Job Class Option: Information Security - Classified Status: Classified - Bargaining Unit/Union: 214 - MN Assoc of Professional Empl/MAPE - FLSA Status: Nonexempt - Designated in Connect 700 Program for Applicants with Disabilities: Yes Then description: "The work you'll do is more than just a job..." etc. We need sections: About the role (maybe from description), Responsibilities (maybe from purpose and duties), Requirements (minimum qualifications), Qualifications (maybe strongly preferred, preferred), Skills (maybe from qualifications), Benefits (explicit Benefits section), Pay (salary range), Schedule (work shift, days, telework eligibility). Also maybe location? Not required heading. We must not create sections with filler like "commensurate with experience". We have actual content. We need to output only HTML fragment, no /. Use

for headings,

• for lists,

  for prose. We need to preserve all substantive info; do not invent or summarize away detail. Thus we need to include details like location, telework eligibility, full-time, etc. Possibly under About the role or Schedule. Let's decide sections: - About the role: could include description about MNIT, purpose, team, etc. Use prose. - Responsibilities: list of duties: provide technical assistance, complex problem resolution, evaluation, analysis, design, planning, development, implementation of info security solutions; analysis of system problems, needs, new requirements; examination of compliance, vulnerabilities, risks; assistance with determination and creation of security defense mechanisms; work onsite at 540 Cedar St., St. Paul at least 50% time; telework eligibility details; maybe also mention travel required: No. But we need to ensure we don't duplicate. - Requirements: Minimum Qualifications: 3 years IT related experience with direct experience using info security tools; experience conducting security risk and control assessments; familiarity with cybersecurity frameworks and federal info security standards; experience assisting with, implementing, or maintaining technical security controls; demonstrated ability to communicate clearly; customer-focused approach; education substitution details. - Qualifications: Could combine Strongly Preferred Qualifications and Preferred Qualifications. Could have a section Qualifications (maybe separate from Requirements). But we need to avoid thin sections. Could have one Qualifications section that includes both strongly preferred and preferred qualifications as list. - Skills: maybe list of specific tools: Burp, Acunetix, Veracode; Azure security tools: Defender for Cloud, Entra ID, Key Vault; NIST security controls; documentation; coordinating work tasks; Security+ cert; cultural sensitivity. But we could incorporate skills into Qualifications. However the instruction says use sections like Skills if posting has real specific content. We have specific skills list. Could create Skills section. - Benefits: list from Benefits section. - Pay: salary range. - Schedule: work shift, days, telework eligibility details, travel required. We must not create sections with filler. All these have content. We need to ensure we don't include boilerplate like EEO, legal, etc. Remove those. Now craft HTML. We'll start with

  About the role

  then

  with description: The work you'll do... includes description of MNIT, purpose, team, etc. We'll need to include all substantive info from that paragraph. Let's extract that paragraph: "The work you'll do is more than just a job. At the State of Minnesota, employees play a critical role in developing policies, providing essential services, and working to improve the well-being and quality of life for all Minnesotans. The State of Minnesota is committed to equity and inclusion, and invests in employees by providing benefits, support resources, and training and development opportunities. Join the 2,800+ professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Services team, which delivers a full suite of services to state agencies, boards, councils, and commissions, and many central services to local government partners. This posting will be used to fill multiple vacancies. All applicants will be considered for each vacancy. The purpose of this position is to provide technical assistance, complex problem resolution and assistance to DHS and MNIT staff in the evaluation, analysis, design, planning, development, and implementation of information security solutions to support DHS modernization. Emphasis involves analysis of overall system problems, needs, and new requirements, in addition to examination of compliance, vulnerabilities and risks of existing systems. You will also provide assistance with the determination and creation of ever-changing security defense mechanisms in place at DHS. This position requires an employee to work onsite at 540 Cedar St., St. Paul, Minnesota at least 50% [or more or less if space limitations remain] of the time, with limited telework available. Telework eligibility depends on residence: Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%. Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%. Candidates living 50 miles or more from the worksite in a bordering state may work onsite 100% or may be telework eligible if relocating within 50 miles." We need to keep that content. Note the bracketed text "[or more or less if space limitations remain]" is part of posting; we should keep it. Now Responsibilities: maybe we can extract from purpose and duties: Provide technical assistance, complex problem resolution, assistance to DHS and MNIT staff in evaluation, analysis, design, planning, development, implementation of info security solutions; analysis of overall system problems, needs, new requirements; examination of compliance, vulnerabilities, risks; assistance with determination and creation of security defense mechanisms. Also mention work onsite and telework eligibility maybe belongs to Schedule. Travel required: No. We'll create Responsibilities

  • items. Requirements: Minimum Qualifications list. We need to include education substitution details. Qualifications: Strongly Preferred Qualifications and Preferred Qualifications. Skills: maybe list of specific tools and certifications. But we might combine Qualifications and Skills to avoid thin sections. However instruction: "Prefer a few substantive sections over many thin ones." So we could have Qualifications section that includes both strongly preferred and preferred qualifications and also skills. But we also have a separate Skills heading allowed. Might be better to have Qualifications (including experience, education, certifications) and Skills (specific tools). Let's decide. We'll create: - About the role - Responsibilities - Minimum Qualifications (maybe heading Requirements) - Preferred Qualifications (maybe heading Qualifications) - Skills (maybe heading Skills) - Benefits - Pay - Schedule But we need to use headings exactly as given: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we must use those exact headings if we include them. Thus we need sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must only include sections when posting has real specific content for it. All have content. Now fill each. About the role: as above paragraph (including purpose, team, etc). Ensure we keep all details. Responsibilities: list of duties (maybe same as purpose). But we need to avoid duplication; we can still list responsibilities distinct from About the role. Could list: Provide technical assistance and complex problem resolution to DHS and MNIT staff; evaluate, analyze, design, plan, develop, implement information security solutions; analyze overall system problems, needs, new requirements; examine compliance, vulnerabilities, risks of existing systems; assist with determination and creation of ever-changing security defense mechanisms; ensure onsite work at 540 Cedar St., St. Paul at least 50% of time; adhere to telework eligibility rules; travel not required. But some of that overlaps with About the role. However we need to preserve all substantive info; duplication is okay as long as we don't invent or summarize away detail. It's okay to repeat. Requirements: Minimum Qualifications: list items. - Minimum of three (3) years of IT related experience in IT related field that includes direct experience using information security tools. - Experience conducting security risk and control assessments. - Familiarity with cybersecurity frameworks and federal information security standards. - Experience assisting with, implementing, or maintaining technical security controls. - Demonstrated ability to communicate clearly and effectively in a manner that facilitates mutual understanding. - Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences. - Education substitution: a master’s degree for eighteen (18) months of experience; a bachelor’s degree for one (1) year; and an associate’s degree for six (6) months. We'll put as
    • . Qualifications: Could include Strongly Preferred Qualifications and Preferred Qualifications. Strongly Preferred: - Experience using information security scanning tools such as Burp, Acunetix, and Veracode. - Experience using Azure security tools such as Defender for Cloud, Entra ID, and Key Vault. - Experience working with NIST security controls and documenting security controls. Preferred: - Experience managing and maintaining documentation including procedures, standards, policies, spreadsheets. - Experience coordinating or planning work tasks and follow direction and guidance from others. - Security related certifications such as Security+. - Ability to be sensitive to and respectful of the cultural and other differences that will be encountered when interacting with co-workers and in serving customers. We'll list as
      • . Skills: Could list specific tools and certifications again? Might be redundant. But we could list technical skills: Burp, Acunetix, Veracode; Azure Defender for Cloud, Entra ID, Key Vault; NIST security controls; documentation management; work task coordination; Security+ certification; cultural sensitivity. However that's similar to Qualifications. Perhaps better to have Skills section list the specific tools and certifications, while Qualifications section list experience and education. But we already put tools in Qualifications. To avoid duplication, maybe we put Skills as list of specific tools and certifications, and Qualifications as experience and education. Let's restructure: - Requirements: Minimum Qualifications (experience, education substitution) - Qualifications: Strongly Preferred and Preferred Qualifications (experience with tools, certifications, documentation, coordination, cultural sensitivity) - Skills: maybe list of specific tools (Burp, Acunetix, Veracode; Azure Defender for Cloud, Entra ID, Key Vault; NIST security controls) and certifications (Security+). But that duplicates with Qualifications. Could instead put Skills as list of technical skills (tools