Junior Security Analyst

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the posting. We need to remove boilerplate, navigation, EEO, etc. Keep substantive info. Let's extract: - About the role: description of role: "The Junior Information Technology (IT) Security Analyst will be responsible for assisting with two core functions for the enterprise. The first is the day-to-day operations of the in-place security solutions while the second is the identification, investigation and resolution of security breaches detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in creation/maintenance of policies, standards, baselines, guidelines and procedures as well as assisting with conducting vulnerability audits and assessments. The Junior IT Security Analyst is expected to be fully aware of the enterprise’s security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals." Also description of company: "Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people." That could be About the role or maybe separate but we can combine. - Responsibilities: list of duties: many bullet-like sentences. We need to extract essential duties and responsibilities list. From "Essential Duties And Responsibilities" and later bullet points. List items: - Must be able to pass a background check. - Must be a U.S. born or naturalized citizen due to government or federal requirement - Strategy and Planning - Participates in the planning and design of enterprise security architecture. - Participates in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures). - Participates in the planning and design of a risk management plan, enterprise business continuity plan and disaster recovery plan. - Analyze and Develop - Maintains up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors. - Assists in analyzing security events and incidents to identify potential threats or breaches. - Assists in the review and impact processes for all incoming cyber security information: bulletins, vendor notifications and communications from government sources. - Determine if CNI is affected and then lead the resolution processes if necessary. - Works with security analysts to recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security. - Operational Management - Helps ensure that up-to-date baselines are maintained for the secure configuration and operations of all in-place devices e.g. security tools, workstations, servers, network devices, etc. - Assists with conducting vulnerability assessments and penetration testing on computer systems, networks, and applications. - Assists with evaluation and remediation of user-reported malicious email - Collaborates with security analysts to develop and implement security policies, procedures, and standards - Participates in incident response tasks, partnering with 3rd party SOC, cyber security insurance vendors, and internal resources. - Collaborates with cross-functional teams to ensure compliance with relevant regulatory requirements and industry standards. - Assists in conducting risk assessments to identify potential security weaknesses and recommend appropriate controls. - Assists in the deployment and management of security tools, intrusion detection systems, and antivirus software. - Participates in incident response activities, including investigating security incidents, documenting findings, and recommending remediation actions. - Stays up-to-date with the latest security trends, vulnerabilities, and industry best practices. - Assists in conducting security awareness training sessions for employees to promote a culture of cybersecurity awareness. - Monitors and maintains all operational configurations of all in-place security solutions as per the established baselines. - Reviews logs and reports of all in-place devices. - Interprets the implications of that activity and devise plans for appropriate resolution. - Participates in the design and execution of vulnerability assessments, penetration tests, and security audits. - Provides on-call support for end users for all in-place security solutions; this can be 24x7 support. - Assists in creation and maintenance of a patching schedule; work with technical teams to develop patching priorities. - Assists the Information Security Compliance Manager with developing relevant security data reports. - Assists the Information Security Compliance Manager with managing the security training system and confirming completion of training by all employees. - Assists in the creation and maintenance of plan, policy, and procedure review schedule for the Enterprise. Also earlier: "Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines and procedures as well as assisting with conducting vulnerability audits and assessments." Already covered. - Requirements: "Essential Requirements One or more of the following certifications: CompTIA Security+ CompTIA Network+GIAC Information Security Fundamentals Microsoft Certified Systems Administrator: Security Associate of (ISC)2" Also "Must be able to pass a background check." and "Must be a U.S. born or naturalized citizen due to government or federal requirement" could be requirements. - Preferred Requirements: "CCST Cybersecurity or Networking CompTIA CySA" - Education And Experience: "Bachelor's degree in Computer Science and zero to three (0-3) years relevant experience, or equivalent combination of education/experience." - Benefits: "CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays." Later also: "CNI Offers a Comprehensive Benefits Package That Includes MedicalDentalVision401(k)Family Planning/Fertility AssistanceSTD/LTD/Basic Life/AD&DLegal-Aid ProgramEmployee Assistance Program (EAP)Paid Time Off (PTO) Training and Development Opportunities" We need to combine benefits list without duplication. - Pay: "The estimated pay range for this role is $48,200 to $60,000, with the final offer contingent on location, skillset, and experience." - Schedule: Not explicitly mentioned. There's no schedule info. So we should NOT include Schedule section. - Skills: Not explicitly listed but could infer from responsibilities. However we should only include if posting has real specific content for Skills. There's no explicit Skills section. Could we create Skills from responsibilities? The instruction: "Prefer a few substantive sections over many thin ones." It says include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. There's no explicit Skills list, so we should not create a Skills section. Thus sections: About the role, Responsibilities, Requirements (maybe combine Essential and Preferred?), Qualifications (Education and Experience), Benefits, Pay. We need to decide naming: The instruction list includes headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can map: - About the role: role description + company description. - Responsibilities: list of duties. - Requirements: essential requirements (certifications, citizenship, background check) plus maybe preferred? Could separate but we can include both essential and preferred under Requirements? Might be better to have Requirements for essential, and Qualifications for education/experience. Preferred could be under Requirements as "Preferred" but we could also put under Requirements as a sublist? The instruction didn't forbid subheadings inside sections. We'll just list items. - Qualifications: Education and Experience. - Benefits: list. - Pay: pay range. We must not repeat job title as heading. Not include Job ID etc. We must output only HTML fragment. We'll use

for each section heading. Inside sections, use

for prose,

• for lists. We need to preserve all substantive information, not invent or summarize away detail. Let's craft. About the role: combine two paragraphs. Paragraph 1: role responsibilities overview. Paragraph 2: company description. We'll put as

  elements. Responsibilities: we need to list all duties. Could group under headings? But we can just make a flat list of items. However there are many items; we can keep them as

• . Ensure we include all items from the list. Let's extract all duty items precisely. From text: - Must be able to pass a background check. - Must be a U.S. born or naturalized citizen due to government or federal requirement Then under Strategy and Planning: - Participates in the planning and design of enterprise security architecture. - Participates in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures). - Participates in the planning and design of a risk management plan, enterprise business continuity plan and disaster recovery plan. Analyze and Develop: - Maintains up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors. - Assists in analyzing security events and incidents to identify potential threats or breaches. - Assists in the review and impact processes for all incoming cyber security information: bulletins, vendor notifications and communications from government sources. - Determine if CNI is affected and then lead the resolution processes if necessary. - Works with security analysts to recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security. Operational Management: - Helps ensure that up-to-date baselines are maintained for the secure configuration and operations of all in-place devices e.g. security tools, workstations, servers, network devices, etc. - Assists with conducting vulnerability assessments and penetration testing on computer systems, networks, and applications. - Assists with evaluation and remediation of user-reported malicious email - Collaborates with security analysts to develop and implement security policies, procedures, and standards - Participates in incident response tasks, partnering with 3rd party SOC, cyber security insurance vendors, and internal resources. - Collaborates with cross-functional teams to ensure compliance with relevant regulatory requirements and industry standards. - Assists in conducting risk assessments to identify potential security weaknesses and recommend appropriate controls. - Assists in the deployment and management of security tools, intrusion detection systems, and antivirus software. - Participates in incident response activities, including investigating security incidents, documenting findings, and recommending remediation actions. - Stays up-to-date with the latest security trends, vulnerabilities, and industry best practices. - Assists in conducting security awareness training sessions for employees to promote a culture of cybersecurity awareness. - Monitors and maintains all operational configurations of all in-place security solutions as per the established baselines. - Reviews logs and reports of all in-place devices. - Interprets the implications of that activity and devise plans for appropriate resolution. - Participates in the design and execution of vulnerability assessments, penetration tests, and security audits. - Provides on-call support for end users for all in-place security solutions; this can be 24x7 support. - Assists in creation and maintenance of a patching schedule; work with technical teams to develop patching priorities. - Assists the Information Security Compliance Manager with developing relevant security data reports. - Assists the Information Security Compliance Manager with managing the security training system and confirming completion of training by all employees. - Assists in the creation and maintenance of plan, policy, and procedure review schedule for the Enterprise. Also earlier: "Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines and procedures as well as assisting with conducting vulnerability audits and assessments." This is somewhat duplicate but we can include as an item: "Involvement in the implementation of new security solutions, participation in the creation and/or maintenance of policies, standards