What are the responsibilities and job description for the IT Security Analyst position at Kansas Department of Labor?
Agency Information: Kansas Department of Labor
The Kansas Department of Labor (KDOL) assists in the prevention of economic insecurity through unemployment insurance and workers compensation, by providing a fair and efficient venue to exercise employer and employee rights, and by helping employers promote a safe work environment for their employees. This facilitates compliance with labor laws while enabling advancement of the economic well-being of the citizens of Kansas.
At KDOL, our employees are our most valuable resource. We encourage our employees to grow and advance by participating in job shadowing/training opportunities within KDOL. We value work-life balance and offer flexible schedules and telework opportunities.
As a quickly growing agency, we are always looking for passionate, talented and creative people to join our team. If you’re looking for a challenge that will lead you to the next level of your career, you’ve found the right place. Come grow with us!
Learn more @ dol.ks.gov
About the Position
How to Apply: Jobs.gov #215971
Application Due: Open until filled
Office Location: Hybrid. Onsite, Topeka 3 days, potentially 2 telework days
Who can apply: External (Open to all)
Classified/Unclassified Service: Unclassified
FLSA Status: Non-Exempt
Full-Time/Part-Time: Full-Time
Work Schedule: Monday – Friday
Eligible to Receive Benefits: Yes
Compensation: $70,000 / year
Position Summary & Responsibilities: IT Security Analyst
Under general direction, is responsible for supporting the implementation, documentation and assessing security, compliance, and integrity of all systems. This includes analysis and review of data from our scanning and other tools to detect vulnerabilities and compliance. Analysis, reporting and planning in coordination with other team members, appropriate actions to resolve vulnerabilities and compliance issues; in coordination with and in support of system managers, developers and team members, documentation of systems’ security control implementation, testing of controls, and establishing baselines for systems. Exercises no supervision.
Responsibilities:
- Use required standards and publications to support implementation of security measures to protect systems, network, and information. Review and update technical security documents and report to security leadership. Proposes improvements and assists in the implementation of system and enterprise-wide security controls, standards, procedures, and guidelines.
- Review and analyze reports from various tools and processes to recommend, plan, assess and implement security requirements, patches.
- Assist in documenting security baselines using accepted configuration guidelines (IRS SCSEM, CIS). Identify changes to established security configuration baselines, plan and coordinate implementation and documentation of changes.
- Review and assess IT component configuration on periodic basis, comparing to HW/SW inventory, and required configuration baselines, reporting on any gaps or compliance deficiencies.
- Assists in security audits. Provide updated documentation and artifacts as requested. Support scheduling testing of backups.
- Provides security support for application and infrastructure-related projects. Resolves problems and assists with security incident handling.
- Provide necessary documentation, status reports, and participate in meetings as needed.
- Performs other related duties to support team and fulfills responsibilities as required.
Minimum Qualifications:
- Bachelors in Information Security, Computer Science or related field. Equivalent IT experience may also be acceptable.
- 3-5 years of related experience.
Special Knowledge, Skills and Abilities:
- Experience with cloud security (AWS, Azure, etc.) Knowledge of scripting or automation for security tasks (Python, PowerShell). Familiarity with SIEM tools (e.g., Splunk, ArcSight, QRadar)
- Knowledge of firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and encryption technologies. Proficiency in security tools like SIEM systems (Splunk, IBM QRadar), vulnerability scanners (Nessus, OpenVAS), and anti-malware software. Familiarity with network protocols (TCP/IP, HTTP, DNS, etc.) and operating systems (Windows, Linux, etc.).
- Problem-solving and analytical skills. Attention to detail for identifying security vulnerabilities. Ability to communicate technical issues to non-technical stakeholders.
Equal Employment Opportunity
The State of Kansas is an Equal Opportunity Employer. We value diversity, equity, and inclusion as essential elements that create and foster a welcoming workplace. All qualified persons will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, political affiliation, disability or any other factor unrelated to the essential functions of the job.
If you wish to identify yourself as a qualified person with a disability under the Americans with Disabilities Act and would like to request an accommodation, please address the request to the agency recruiter.
Job Type: Full-time
Pay: $70,000.00 per year
Benefits:
- Dental insurance
- Health insurance
- Paid time off
- Vision insurance
Schedule:
- Day shift
- Monday to Friday
People with a criminal record are encouraged to apply
Work Location: In person
Salary : $70,000