Security Analyst

Job Summary: The Security Analyst is responsible for the daily administration, monitoring, and operational support of the District’s cybersecurity program. This position assists in protecting district technology resources through security monitoring, vulnerability management, identity and access management, endpoint security, incident response, and implementation of cybersecurity best practices.

Working closely with the Security Engineer, Systems Engineering, Network Services, Information Systems, and Technology Services teams, the Security Analyst helps maintain a secure, reliable, and resilient technology environment while participating in cybersecurity projects, supporting compliance initiatives, and continuously improving the District’s overall security posture., * Monitor enterprise security platforms for potential threats, suspicious activity, and security events.

• Investigate security alerts and assist with incident response, containment, recovery, documentation, and follow-up activities.
• Assist with the administration of firewall technologies, endpoint protection platforms, email security systems, identity management solutions, and security monitoring tools.
• Perform vulnerability scanning, risk analysis, remediation tracking, and validation activities.
• Assist with the administration of identity and access management systems, including user access reviews, authentication technologies, and multi-factor authentication.
• Support endpoint security initiatives by monitoring compliance, assisting with security policy implementation, and coordinating remediation activities.
• Maintain security logs, documentation, operational procedures, and cybersecurity records.
• Assist with technology risk assessments, security reviews, and security audits.
• Collaborate with Systems Engineering, Network Services, Endpoint Services, and Information Systems to implement and maintain cybersecurity best practices.
• Support disaster recovery planning, business continuity testing, and security validation activities.
• Evaluate emerging cybersecurity threats and recommend operational improvements.
• Participate in cybersecurity awareness initiatives by assisting with user education and promoting security best practices.
• Coordinate with vendors regarding cybersecurity products, updates, and support activities.
• Participate in cybersecurity projects, technology implementations, and operational improvement initiatives.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a closely related field, or an equivalent combination of education and experience.
• Three years of experience supporting cybersecurity, network administration, systems administration, or enterprise technology infrastructure.
• Experience supporting enterprise security technologies, endpoint protection, identity management, or security monitoring solutions.
• Demonstrated analytical, troubleshooting, and problem-solving skills., * Experience supporting K-12 technology environments.
• Experience administering enterprise security technologies such as Palo Alto Networks, Cortex, Microsoft Defender, Cisco Secure Email, Okta, Microsoft Entra ID, or comparable technologies.
• Experience with vulnerability management, SIEM platforms, endpoint detection and response (EDR), and security monitoring tools.
• Experience supporting cloud security and hybrid infrastructure environments.
• Industry certifications such as Security+, CySA+, Palo Alto, Microsoft Security, or equivalent.