Security Analyst

Job Title: Security Analyst

Location: Tallahassee, Florida (100% Onsite)

Duration: 1 yr, plus extension

Rate: W2 CHP

Start Date: February, 2024

Required Qualifications:

A bachelor’s degree or master's degree from an accredited college or university in Computer Science, Information Systems, or a related field is required. Alternatively, equivalent work experience can be substituted for the educational requirement on a year-for-year basis, when applicable.

The Department requires the following experience, skills, and/or knowledge for this position:

• Five (5) years or more of server or network administration experience;

• Three (3) years or more of information security administration experience in an enterprise environment with 1,000 or more users;

• Two (2) years or more experience managing technical implementations;

• Three (3) years or more of SIEM experience;

• Three (3) years or more of vulnerability management experience;

• Knowledge of security issues, techniques, and implications across all existing computer platforms; and

• Experience maintaining and supporting third-party antivirus applications.

NOTE: In addition to the above list, the selected Candidates must successfully complete a Level II Background Check and CJIS security awareness training.

Preferred Qualifications:

The Department prefers the Candidates to have the following experience, skills, and/or knowledge for this position:

• Experience working with IDS/IPS systems;

• Experience using Office 365 Data Loss Prevention (DLP);

• Preparing status reports and providing management briefings;

• Knowledge of IT standards in a criminal justice environment;

• Experience with Microsoft security technologies such as Azure Security Center, Microsoft Defender, and Active Directory; and

• Familiarity with law enforcement security standards, specifically CJIS, and other relevant State regulations.

Description/Deliverables:

The Department's OIT is seeking an experienced Security Analyst under the working title of Advanced Information Security Analyst. The Advanced Information Security Analyst position entails the following:

• Lead the technical implementation of security projects, focusing on system hardening, network security, and identity management while collaborating with teams to meet law enforcement-specific security standards;

• Expertise in firewalls, Intrusion Detection Systems/Intrusion Prevention Systems (IDS/IPS), encryption, secure Microsoft configurations, conducting vulnerability assessments, and developing remediation strategies;

• Manage security tools, support threat detection and incident response, and ensure integration of security platforms;

• Compliance with Criminal Justice Information Services (CJIS) and State of Florida (State) regulations is critical, as is working with Governance, Risk, and Compliance (GRC) teams to ensure adherence and address audit gaps;

• Documenting and training on cybersecurity solutions and processes, focusing on CJIS and State regulations;

• Reengineer security processes for efficiency and compliance; and

• Provide support for cybersecurity issues and stay informed on emerging threats and technologies.

The selected Candidate will report directly to the Information Security team’s Information Security Operations Manager and will be required to complete tasks related to the Scope of Work in Section 2.3.

Scope of Work/Job Characteristics:

The Advanced Information Security Analyst will serve as the principal line of communication for the

project team. The duties and responsibilities of this position are as follows:

• Lead the technical implementation of security projects, focusing on system hardening, network security, encryption tools, vulnerability management, security monitoring, and Identity and Access Management (IAM) systems within a Microsoft and Azure environment;

• Collaborate with cross-functional teams to deploy security solutions that meet project requirements, focusing on law enforcement-specific security standards;

• Ensure timely delivery of security projects aligned with the organization's requirements, maintaining adherence to scope, timeline, and budget;

• Provide hands-on expertise in areas such as firewalls, IDS/IPS, encryption, endpoint protection, and secure configuration of Microsoft environments;

• Implement secure system architecture and networking solutions within Microsoft Azure or other related cloud computing platforms;

• Conduct vulnerability assessments and develop remediation strategies, ensuring continuous improvement in security posture;

• Configure, deploy, and manage security tools such as Security Information and Event Management (SIEM) systems, Microsoft Azure Security Center, and endpoint security solutions tailored for a Microsoft environment;

• Ensure proper integration of security platforms across IT systems and support threat detection, prevention, and incident response;

• Design and maintain incident response procedures tailored to law enforcement settings;

• Conduct root cause analysis and develop and implement appropriate remediation measures;

• Ensure adherence to CJIS, State regulations, and other relevant security compliance standards;

• Work closely with GRC teams to ensure the organization remains in compliance with State and federal security regulations;

• Assist with security audits, including CJIS compliance reviews, and address any identified gaps to maintain compliance in Microsoft and Azure systems;

WE DO NOT WORK WITH THIRD PARTIES, NO VISA SPONSORSHIP/TRANSFER, AND CAN DO W-2 ONLY. THANK YOU FOR YOUR INTEREST.