[ref. h1848618] Information Security Analyst - Harrisburg

1. Monitor and identify security issues, reporting and resolving level-one issues while escalating level-two and levelthree issues. 2. Monitor and identify system performance and perform maintenance on all systems and internal environments. 3. Conduct vulnerability analysis and coordinate mitigation and response efforts. 4. Conduct incident analysis and response using user entity behavior analytics, network threat analysis, intrusion detection system/intrusion protection systems, endpoint protection platforms, next generation firewall tools. 5. Deliver security awareness training, support phishing awareness activities, conduct data/malware analysis 6. Maintain confidentiality regarding sensitive incidents and information being processed, stored, or accessed by the network. 7. Participate in the creation and implementation of policies or procedures to protect the Clientand its member districts. 8. Provides supports for the implementation of projects that are in support of the Client security goals. 9. Maintain proficiency in cybersecurity trends and issues. Participate in continuing education in cybersecurity with a focus on vulnerability and threat identification, mitigation, incident response, and security assessment/penetration testing. 10. Create and maintain a documentation library for processes, policies, evidence control, as well as technical data covering both internal systems and networks. 11. Maintain critical system backups in accordance with defined retention policies and perform data recovery as needed. 12. Create and maintain instructional material and documentation used to implement disaster recovery plan. 13. Attend Client technology meetings as assigned and other team or Client meetings as requested. 14. Assume any other responsibilities as assigned by Supervisor/Director of Technology or his/her designee.

1. High School Diploma or GED 2. IT certifications or IT security certifications preferred. 3. Minimum (3) years of professional systems administration / IT security or similar technology experience required. 4. Knowledge of Windows server environment, Active Directory and Group Policy Management required. 5. Working knowledge of VMWare or virtualization technologies preferred. 6. Experience using enterprise firewall experience preferred 7. Strong knowledge of security frameworks, CIS controls preferred. 8. Strong knowledge of software, hardware, and networking protocols required. 9. Ability to work with technical and nontechnical staff. 10. Knowledge of implementing industry best practices for security, storage, and disaster recovery protocols required. 11. Experience in delivering training to large groups of people. 12. Excellent communication skills required. 13. Must demonstrate leadership abilities. Job Goal: To perform day-to-day cybersecurity threat analysis, incident response, and vulnerability remediation to ensure confidentiality, integrity, and availability of digital assets. Collect data from cybersecurity consortium members to create reports, plans and policies that support the regions cybersecurity efforts.

Benefits

Compensation $84,000 - $90,000