Information Security Analyst

The Information Security Analyst is responsible for monitoring, detecting, analyzing, and responding to cybersecurity events across the agency’s technology environment. This role provides frontline security monitoring and incident handling while also supporting deeper investigation, vulnerability management, and threat analysis. The analyst helps maintain the confidentiality, integrity, and availability of agency systems while ensuring adherence to CJIS, organizational policies, and cybersecurity best practices., * Monitor SIEM alerts, endpoint detection tools, email security systems, and network traffic for indications of malicious activity.

• Conduct initial investigation of suspicious events including phishing, malware detection, unauthorized access attempts, or policy violations.
• Support the full incident response lifecycle including identification, containment, eradication, and recovery.
• Assist with post-incident reviews, lessons learned, and remediation tracking.
• Conduct basic proactive threat hunting activities to identify abnormal behaviors or patterns that may indicate compromise.
• Correlate threat intelligence with agency logs, alerts, and telemetry.
• Validate and track remediation of discovered vulnerabilities across endpoints, servers, and network infrastructure.
• Assist in managing and tuning SIEM, EDR, IDS/IPS, email filtering, identity security, and other defensive tools.
• Support user access reviews, MFA troubleshooting, and identity governance tasks.
• Support compliance efforts with CJIS Security Policy, internal policies, and audit requirements.
• Assist with cybersecurity awareness activities and phishing simulations.
• Collaborate with vendors, service providers, and partnering agencies to resolve technical issues, support integrations, ensure compliance, and maintain secure information-sharing practices.
• Participate in the on-call rotation.
• Attend work on a regular and consistent basis.
• Must adhere to Federal, State, County, and local ordinances.
• Performs other duties as assigned.

Do you have experience in Communication skills?, * Graduation from high school or possession of a GED

• Associate or bachelor’s degree in information technology (IT), cybersecurity, or related field preferred.
• A minimum of one (1) year of experience in IT, HelpDesk, SOC, System Administration, or security operations.
• A comparable amount of education and experience may be substituted for the minimum requirements.

Selection Process: The selection process will include a review of each qualified applicant’s education and experience and a formal interview in accordance with VSO policies and procedures.

Background Screening: This position will require an extensive background investigation., * General office setting with most duties being performed while sitting at a desk, table, or workstation.

• Must be able to work under stressful conditions.
• Must be able to relocate to other county locations based upon operational needs.
• Must be able to remain available to work when a public emergency or disaster occurs.

Skills and Abilities:

• Strong analytical, communication, and documentation skills.
• Ability to handle sensitive information and follow security procedures, including CJIS requirements.
• Ability to assist users with MFA, identity management, and secure access practices.
• Ability to identify, troubleshoot, diagnose, and resolve security-related issues involving endpoints, servers, applications, and network systems.
• Ability to apply cybersecurity principles, incident response procedures, and best practices.
• Ability to organize work, manage multiple tasks, establish priorities, and meet deadlines in high-pressure situations.
• Ability to think logically and pay close attention to detail.

Required Knowledge:

• VSO General Orders and procedures.
• Basic understanding of networks, operating systems (Windows, Linux, Mac), and cybersecurity principles.
• Familiarity with SIEM tools, EDR platforms, and vulnerability scanners.
• Microsoft 365 applications and SharePoint.
• Modern office practices, procedures, and equipment.
• Business English, spelling, punctuation, and arithmetic.

Physical Requirements:

• Manual dexterity.
• Ambulate independently.
• Sit for extended periods of time.
• Utilize a computer/keyboard for extended periods of time.
• See at a normal range or with reasonable accommodation.
• Hear at a normal level or with reasonable accommodation.
• Occasionally bend, squat, reach, grasp.
• Occasionally lift up to thirty-five pounds (35 lbs.).