Information Security Analyst

Position Summary

Performs daily cybersecurity monitoring, analysis, vulnerability tracking, risk documentation, incident coordination, security awareness support, and metrics reporting. The position serves as the County's internal operational liaison to the managed SOC/MDR provider and helps ensure that alerts, vulnerabilities, access reviews, and corrective actions are assigned and completed.

Essential Functions

· Reviews and validates security alerts, MDR/SOC escalations, endpoint events, identity events, firewall events, and other security telemetry.

· Coordinates incident tickets, escalation, evidence collection, status updates, containment actions, and remediation follow-up.

· Operates the vulnerability-management process, including scan scheduling, result validation, asset assignment, remediation tracking, exception documentation, and reporting.

· Maintains security inventories for endpoints, servers, critical systems, privileged accounts, vendors, applications, and external assets.

· Performs recurring access reviews, privileged-account reviews, service-account reviews, and vendor-access reviews.

· Develops dashboards, metrics, trend reports, risk summaries, and monthly executive reporting inputs.

· Supports phishing simulation, security awareness, department outreach, tabletop exercises, and policy communications.

· Assists with security assessments, audit requests, cyber-insurance evidence, vendor reviews, and project security requirements.

· Documents procedures, playbooks, escalation matrices, analyst guides, and knowledge articles.

· Tracks corrective actions from incidents, assessments, vulnerability scans, audits, and risk reviews.

· Participates in an on-call or escalation rotation as assigned.

The duties listed are representative and not exhaustive. The employee may be required to perform other job-related duties consistent with the position's purpose and classification.

Minimum Qualifications

· Bachelor's degree in cybersecurity, information systems, computer science, criminal justice with cyber emphasis, or a related field.

· Three years of experience in security operations, vulnerability management, systems/network administration with security duties, IT audit, risk analysis, or a comparable field.

· Equivalent combinations of education, certifications, and directly relevant experience may be considered.

Preferred Qualifications

· Security+, CySA+, SSCP, GSEC, Microsoft security, SentinelOne, Tenable, Splunk or other SIEM, or comparable certification/experience.

· Experience coordinating with an MDR/SOC, public safety, courts, government, healthcare, finance, or another regulated environment.

· Strong writing, documentation, customer service, and analytical skills.

Knowledge, Skills, and Abilities

· Security monitoring, incident triage, vulnerability management, risk tracking, identity/access review, reporting, documentation, and customer communication.

· Ability to analyze incomplete information, identify patterns, maintain confidentiality, and follow through on corrective actions.

Working Relationships and Service Expectations

· Works collaboratively with County Administration, department heads, elected officials, IT staff, vendors, and external partners.

· Communicates professionally, respectfully, and clearly with technical and nontechnical stakeholders.

· Protects confidential, security-sensitive, personnel, legal, and operational information.

· Supports a customer-service culture focused on partnership, accountability, timely communication, documentation, and continuous improvement.

Working Conditions / Physical Requirements

Primarily office and computer-based work with periodic travel to County facilities. May require work outside normal business hours for projects, maintenance, exercises, or incidents. Must be able to use standard office and computing equipment and communicate effectively in person, by telephone, and through electronic collaboration tools. HR should finalize physical requirements and any on-call language using the County's standard job-description format.

Pay: $71,421.00 - $91,062.00 per year

Benefits:

• 401(k)
• Dental insurance
• Employee assistance program
• Employee discount
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Referral program
• Retirement plan
• Vision insurance

Work Location: In person