Senior/Information Security Analyst - Re-Post

About the role

The positions available are Senior Information Security Analyst and Information Security Analyst. Both roles are under the supervision of the Supervisor, IT Infrastructure.

Responsibilities

• Ensures the stability and integrity of in-house electronic access control and monitoring systems which may include SEIM devices, IDS sensors, IPS, data diodes, firewalls, switches, routers, application white listing, network anomaly detection devices, log retention systems, log forwarding systems, network monitoring systems and analytics software used in the monitoring of critical cyber assets associated with the operation of multiple departments.
• Performs change management and configuration activities, security controls testing, system baseline activities, vulnerability testing and analysis, and network traffic analysis to ensure system reliability and security.
• Installs, troubleshoots, and maintains hardware and software systems related to electronic access control and monitoring systems.
• Reviews logs, configurations, rule sets, user accounts, account groups and network traffic for adherence to policy/procedure.
• Responds to anomalous events that will require analysis and synthesizes and correlates complex events to ensure operational security.
• Tests and implements IDS/IPS rule sets and signatures.
• Conducts security controls testing after significant changes to cyber assets to ensure proper security posture to meet regulatory guidelines.
• Maintains and monitors cyber assets and critical infrastructure to ensure system up-time.
• Engages in change/configuration management activities for cyber assets.
• Performs network traffic analysis when anomalous traffic needs to be investigated.
• Writes reports and briefings related to specific information security issues.
• Tickets and tracks operational issues related to the security posture of cyber assets which are in scope for this group.
• Conducts research on network products, services, protocols and standards to remain abreast of developments in the information security industry.
• Participates in exercises that test policies, procedures and skills which are required by business and critical operations.
• Participates in in-house, regulatory, and industry teams including working groups, committees, incident response teams, and business continuity teams as required.

Qualifications

• Sr. Information Security Analyst: A Bachelor's degree in a related field and five (5) years of directly related experience in information security, digital networking, computing, telecommunications or SCADA/EMS operations is required. Extensive knowledge of TCP/IP and Cisco routing and switching, as well as proven experience with Cisco ASA firewall and VPN appliances, is preferred. Industry specific certifications may be substituted for experience at the rate of one (1) year of experience for each certification. Directly related experience may be substituted for education at the rate of two (2) years of experience for one (1) year of education.
• Information Security Analyst: A Bachelor's degree in Computer Science, Information Management, or a related field and two (2) years of directly related experience in information security, digital networking, computing, telecommunications or SCADA/EMS operations is required. An Associate's degree in Computer Science, Information Management, or a related field and six (6) years of direct work experience may be considered as a substitute for a degree. Extensive knowledge of TCP/IP, Cisco routing and switching and proven experience with Cisco ASA firewall and VPN appliances is preferred. Industry specific certifications may be substituted for experience at the rate of one (1) year of experience for each certification. Directly related experience may be substituted for education at the rate of two (2) years of experience for one (1) year of education.