INFORMATION TECHNOLOGY SECURITY ANALYST

Please attach a DETAILED Resume/Curriculum Vitae (CV), a copy of your transcripts or diploma for all degrees earned, and a copy of any applicable professional licensures to the MY DOCUMENTS section of your application.

Why Work for Illinois?

Working with the State of Illinois is a testament to the values of compassion, equity, and dedication that define our state. Whether you’re helping to improve schools, protect our natural resources, or support families in need, you’re part of something bigger-something that touches the lives of every person who calls Illinois home.

No matter what state career you’re looking for, we offer jobs that fit your life and your schedule-flexible jobs that provide the gold standard of benefits. Our employees can take advantage of various avenues to advance their careers and realize their dreams. Our top-tier benefits and great retirement packages can help you build a rewarding career and lasting future with the State of Illinois.

Functional Statement

The Information Technology Security Analyst reports directly to the Deputy Chief Information Security Officer. Supports the administration, implementation, review, and improvement of cloud, endpoint, network, hardware, application, and data security practices.

Essential Function 1

Implements, maintains, supports, and monitors the agency’s information security services and applications, including email filters, web proxies, web application firewalls, network firewalls, intrusion prevention systems, SIEM, endpoint security, mobile device management, multi-factor authentication, client access, secure browser, threat intelligence resources, vulnerability management, etc. Monitors system dashboards and logs for threat indicators. Analyzes data and performs incident response procedures. Assists with the continuous improvement of SOAR and incident response capabilities.

Essential Function 2

Supports and monitors the agency’s vulnerability and compliance assessment program. Conducts cloud, network, system, and application vulnerability and compliance assessments. Utilizes CIS benchmark configurations and works with agency stakeholders to help drive system and application hardening efforts. Ensures patching and remediation efforts comply with agency service level agreements. Documents violations and provides reports to management. Reviews and responds to information received concerning threat events from end users, federal, state, county and local agencies as well as external association entities such as ISACs, trusted security vendors, law enforcement agencies, and public information sources.

Essential Function 3

Monitor, tune, and investigate alerts from enterprise data-loss prevention and cloud security platforms to detect, prevent and remediate unauthorized exfiltration or exposure of sensitive data. Partner with teams to identify, classify and tag sensitive data assets across on-premise and cloud storage environments.

Essential Function 4

Interacts with SBE staff on security and compliance issues. Responds to report requests and provides analytical context. Provides a high level of customer service to agency staff, state, county, and local election officials. Coaches staff on secure practices and principles. Ensures service desk queues and incidents are handled in an appropriate and timely manner. Service desk ticket resolutions are thoroughly documented and knowledge base articles are maintained., Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above. Provides off-hours support as required.

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field., Prior work experience in Information Technology roles, such as system, application, or network administration., Working knowledge of information security technologies, including endpoint, network, email, web, data loss prevention, encryption, log correlation, vulnerability management, system and application patching, and multi-factor authentication., Experience using Center for Internet Security (CIS) Benchmark configurations to harden systems and applications., Familiarity with cybersecurity focused frameworks such as NIST Cybersecurity Framework (CSF) and CIS Controls., Cybersecurity certifications are required from at least one of the following globally recognized organizations, 2 years of experience in information security is preferred.

As a State of Illinois employee, you receive a comprehensive benefits package including:

• Competitive Group Insurance benefits including health, life, dental and vision plans
• Flexible work schedules (when available and dependent upon position)
• 10 -25 days of paid vacation time annually (10 days for first year of state employment)
• 12 days of paid sick time annually which carryover year to year
• 3 paid personal business days per year
• 13 paid holidays per year
• 12 weeks of paid parental leave
• Pension plan through the State Employees Retirement System
• Deferred Compensation Program - voluntary supplemental retirement plan
• Optional pre-tax programs -Medical Care Assistance Plan (MCAP) & Dependent Care Assistant Plan (DCAP)
• Tuition Reimbursement Program and Federal Public Service Loan Forgiveness Program eligibility