Information Security Analyst

Join the 2,800 professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide.

Job Summary

As an Information Security Analyst (ISA, you will assume a technical role within a security domain in the management of the established Enterprise Information Security Program to ensure that all State information assets are adequately protected against current/future internal/external threats. This position must also have a solid understanding of all other security domains, information technology solutions, and information technology management processes to design and implement seamless interfaces within their domain of expertise. This position will contribute to the design, and implementation of Enterprise-wide information security systems, and recommends modifications/additions to current policies, procedures and guiding practices to be implemented by all State agencies as appropriate. The position may also participate in employee training, and certification and accreditation of program management.

The position operates within one or more of the following security domain areas – system access, telecommunications and network security, security governance/management practices, application and system development security, cryptography, security architecture and models, operational security, security related incidents, business continuity and disaster recovery planning, incident management, legal investigations, and computer forensics systems.

The Information Security Analyst position serves as a technical role staff person for the ongoing application security program within the State of Minnesota’s executive branch. In consultation with other information security professionals, analyst assists with the development, implementation, and maintenance of the application security efforts for new and existing state applications.

This position requires an employee to be onsite with some opportunity for telework

• Telework for Minnesota IT Services allows an employee to perform work from a telework location and an employee may be required to be in the office based on business needs and other dependencies Saint Paul, Minnesota.
• Only candidates located in Minnesota and its bordering counties are eligible for telework.

Qualifications

Position requires a minimum of three (3) years of experience in an information security role.

Experience must include:

• Proficient in Static and Dynamic Scanner such as Acunetix, Burp Suite and Veracode
• Familiar with Web Application Firewalls
• Experience with one or more operating systems (preferably Windows and Linux).
• Proven ability to manage software inventory
• Knowledge of and experience with information security standards such as NIST, ISO 27001/17799, COBIT, ITIL, data privacy laws, computer crime laws, statewide data protection laws.
• Ability to deliver effective verbal or written messages that facilitate a mutual understanding on both parties.
• Customer service skills that include active listening, empathy, and problem-solving.

*A Master's degree in Information Technology or a related field substitutes for three years of experience, related Bachelor's degree substitutes for two years, or related Associate's substitutes for one year.

Minnesota IT Services does not participate in E-Verify. Minnesota IT Services will not sponsor applicant for work visas, including F-1 STEM OPT extensions. All applicants must be legally authorized to work in the United States.