Senior IT Security Analyst

The role of Senior Information Security Analyst is responsible for performing all functions required to support day-to-day date security operations, supporting and maintaining a broad suite of information security infrastructure, accountable for security and networking infrastructure component availability and integrity, monitoring compliance with IT security policy, and coordinating investigation and reporting of security incidents. Work is performed under the direct supervision of the Information Technology Manager., Note: The below description may not be representative of all duties and responsibilities for this position.

• Manage security responsibilities, including firewalls, proxy systems, logging and other security devices.
• Perform risk assessments, threat assessments, vulnerability assessments, and security tests.
• Develop and implement risks, threat, and vulnerability mitigation plans.
• Create and review reports on event anomalies.
• Develop and maintain security policies.
• Raise awareness of security policies and develop corresponding procedures.
• Write and maintain technical documentation including risk and security documents, procedures, project plans, test plans, incident reports, and troubleshooting guides.
• Provide security expertise to the Comptroller¿s office.
• Work with technology staff to design and implement secure technology solutions.
• Assist in the enforcement and monitoring of compliance regulations.
• Investigate and respond to security violations.
• Design and conduct training for security education and awareness programs.
• Define security requirements and review systems to determine if they have been designed to comply with established security standards. Develop new standards as necessary.
• Analyze business needs, research and recommend solutions.
• Select, evaluate, architect, design, implement, and support security devices/protocols/mechanisms/techniques and services.
• Evaluate and recommend new and emerging security products and technologies.
• Establish and manage relations with vendors and related equipment suppliers.
• This position is a member of the Comptroller¿s CSIRT (Computer Security Incident Response Team)., If you are claiming Veterans’ Preference, you are responsible for providing the required eligibility documentation by the closing date of the posting. Please scan and upload a copy of your cover letter and supporting documents, to Orange County Human Resources Division via the secure Box.com folder., If your education was obtained in the United States, the County recognizes degrees or diplomas which are accredited by an agency recognized by the United States Department of Education (USDE) or the Council for Higher Education Accreditation (CHEA). If you have obtained education from a country other than the United States, your degree or diploma must be evaluated to determine the United States equivalency by a member of the National Association of Credential Evaluation Service (NACES) or the Association of International Credentials Evaluations (AICE) at your expense.

• Bachelor¿s degree from an accredited college or university with course work in Computer Science, Computer Engineering, Electronic Engineering, or related discipline AND six years of experience in Information Security.
• Experience with the design and configuration of a network DMZ
• Experience working with information security practices, networks, software, and hardware
• Expert knowledge of TCP/IP, common protocols and standards
• Experience with IPS/IDS systems
• Experience with security scanning tools
• Must possess and maintain a valid Florida Driver¿s License., * CISSP or GSEC Security certification is preferred.
• Knowledge of cloud security principles and best practices (M365 GCC).
• Experience implementing, configuring, and securing Microsoft 365 security and compliance solutions.
• Knowledge of AI security concepts, including generative AI risks, governance, and secure AI implementation.
• Familiarity with PCIDSS 4.0 standards.
• Programming / Scripting expertise desirable.

KNOWLEDGE, ABILITIES AND/OR SKILLS

• Hands-on experience of operating systems and environments (MS Windows, UNIX, LINUX derivative), networking technologies, and Internet protocols.
• Understanding of attack vectors, exploits, and hacking tools.
• Experienced with security infrastructure devices/protocols/algorithms/mechanisms/techniques including routers, encryption, firewalls, WAF, IDS, IPS, SIEM, proxies/reverse proxies, DNS, VPNs, PKI, Two-Factor authentication, Radius, DDoS protection, flow monitors, packet capture tools, malware defenses.
• Experienced in secure configurations for hardware and software on laptops, desktops, servers, SAN/NAS, network, mobile/wireless devices.
• Excellent analytical, organizational, process improvement and problem-solving skills.
• Experienced in assessment and coordinating response to threat/attacks to the technology infrastructure and the supported applications/systems.
• Must have strong verbal and written communication to communicate with both technical and non-technical staff.
• Able to work under heavy pressure.
• Able to work both independently and with technology staff to accomplish multiple tasks and projects.

Pulled from the full job description Tuition reimbursement Health insurance Paid time off Vision insurance Dental insurance Life insurance Employee assistance program, * 10 paid holidays and 1 floating holidays annually.

• 18 days paid time off per year.
• Longevity bonus based on years of service.
• 6 days of paid TERM (sick) time annually.
• Low-cost medical, dental, vision, additional life insurance.
• Free basic life, long term disability, and employee assistance for all the family members effective on day one.

• Participation in the Florida Retirement System.

• Employee assistance program includes multiple free one on one sessions with licensed counselors and online tools for legal advice, financial planning, personal life balance, etc.
• Free access to Wellworks gyms and Orange County Recreation Centers.
• Free onsite wellness coaching, including dietician and nurse.
• Tuition reimbursement program.
• Earn service time to forgive student loans.

Disclaimer: Benefits may vary for employees under collective bargaining agreements.