Cyber Security Analyst

GENERAL SUMMARY:

Responsible for analyzing threats and vulnerabilities in systems, software and processes and then researching cybersecurity solutions to defend against hackers, cyber-attacks and other persistent threats. Engages in monitoring of those solutions, continually making sure that all of the implemented defenses are providing usable data, analyzing data outputs and making recommendations. Works closely with multiple stakeholders and third party vendors to produce, review and analyze data from various solutions required to protect critical assets such as information technology and other systems. Monitors and reports cybersecurity activity while protecting the organization against cybersecurity threats.

PRINCIPAL JOB FUNCTIONS:

1. *Commits to the mission, vision, beliefs and consistently demonstrates our core values.

2. *Maintains and updates cybersecurity plans, policies and response playbooks using established security frameworks.

3. *Maintains and improves secure system configuration, supporting multiple platforms and applications.

4. Analyzes vulnerability assessments and works across the organization to ensure appropriate fixes are tested and implemented where applicable.

5. *Identifies and monitors core projective measures necessary to mitigate risks and identified threats.

6. *Analyzes, investigates and documents system and/or network security breaches as well as root causes of issues.

7. *Analyzes and reviews user and device security logs, identifies any trends or indicators of compromise and reports appropriately.

8. * Analyzes network and systems logs, identifies any trends or indicators of compromise and reports appropriately.

9. Audits system backups and air gap backup solutions for proper utilization.

10. Works with department staff to create processes and standards to deploy new technologies.

11. Supports incident response activities, including steps to identify indicators of compromise, incident containment, and conducts technical analysis to assist in determinating response and recovery requirements.

12. *Ability to assist in detection, prevention and analysis of security threats.

13. Enters restricted access areas, without supervision, to perform assigned work.

14. Maintains professional growth and development through seminars, workshops, and professional affiliations to keep abreast of latest trends in field of expertise.

15. Participates in meetings, committees and department projects as assigned.

16. Performs other related projects and duties as assigned.

(Essential Job functions are marked with an asterisk "*").

REQUIRED KNOWLEDGE, SKILLS AND ABILITIES:

1. Knowledge of operating systems, network and cloud security.

2. Knowledge and experience in maintaining anti-virus software, intrusion detection, firewalls and content filtering.

3. Knowledge of risk assessment and methods for risk mitigation.

4. Skill in analyzing technical security controls and security systems logs.

5. Skill in use of vulnerability and security configuration tools.

6. Skill in critical thinking and attention to detail.

7. Ability to assess security and network issues to provide insight to complex problems.

8. Ability to communicate effectively both verbally and in writing.

9. Ability to identify and evaluate alternative and innovative solutions to problems.

10. Ability to create appropriate security and systems documentation.

11. Ability to establish and manage priorities.

12. Ability to maintain confidentiality relevant to sensitive information.

13. Ability to prioritize work demands and work with minimal supervision.

14. Ability to establish and maintain effective working relationships with all levels of personnel and medical staff.

15. Ability to problem solve and engage independent critical thinking skills.

16. Ability to grasp complex technical and business systems, processes and principles across IT functions and relationships in support of organizational goals.

17. Ability to maintain regular and punctual attendance.

EDUCATION AND EXPERIENCE:

Associate's degree in Computer Science, Information Systems, or equivalent field of study required. Bachelor's degree preferred. Minimum of two (2) years' experience with Windows and/or other operating systems, Active Directory, OSI model and TCP/IP networking protocols and concepts required. One (1) year experience in various cyber security related systems (vulnerability management, firewalls, virus management, etc.) preferred.

OTHER CREDENTIALS / CERTIFICATIONS:

CISA, GCSA, CySA+ or similar industry certification preferred.

PHYSICAL REQUIREMENTS:

(Physical Requirements are based on federal criteria and assigned by Human Resources upon review of the Principal Job Functions.)

(DOT) - Characterized as sedentary work requiring exertion up to 10 pounds of force occasionally and/or a negligible amount of force frequently to lift, carry, push, pull or otherwise move objects, including the human body.

Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time.