Security Analyst III

Under limited supervision, Security Analyst III position is responsible for technical aspects of information security within the South Carolina Judicial Branch (SCJB), as well as for implementation of industry standard security controls that are applied consistently throughout our organization. Reports to and works closely with the Chief Information Security Office in the implementation of technical controls to safeguard the electronic data, communications, and physical and intangible assets within SCJB. Essential Duties and Responsibilities Physical, virtual, & web application Firewall management. Endpoint Security management – use SCJB-approved software on all SCJB workstations and servers to analyze suspicious data traffic, act on reports, and collaborate with the IT Help Desk. Email Security monitoring – investigate and alert on suspicious email reports, update filtering systems to prevent malicious ingress. Two Factor Authentication management – monitor and maintain health of the system for SCJB user accounts, and respond to escalations. Physical Security system monitoring – troubleshoot technical issues with building access control and video system, coordinate changes, maintenance, and installation. Logging & Security Monitoring – use internal enterprise logging system for investigations, integrate new log sources, and respond to alerts from external vendors. Security Awareness coordination – support the awareness training portal, manage periodic training sessions, and conduct phishing assessments. Data Encryption – manage Email DLP system and advise on endpoint device encryption. Research, Test, and Implement new security systems – design, create, test, and document new systems in collaboration with the Chief Information Security Officer and other teams. Perform other duties as assigned by management to meet organizational needs. Qualifications Bachelor's in Computer Science, Information Systems, Cybersecurity, or a related field; OR an associate degree with 10+ years of experience. Seven (7) or more years of combined documented experience in progressively sophisticated roles in networking, information security engineering (including firewall, endpoint, email security, identity and access control, security threat analysis). Strong, diverse technical background in networking and troubleshooting. Must hold two or more industry standard security certifications (e.g., CompTIA Security+, SANS/GIAC GISF, GSEC, CISSP). Vendor specific certifications such as Cisco CCNA, Checkpoint CCSA, etc.; experience with Cisco Firepower, Check Point R80+, Linux/UNIX, Tenable, web application firewalls & bot prevention. Experience in a hybrid environment with multiple physical or virtual site locations is a plus. Experience with Microsoft Cloud security controls, logging, and identity management desired. Experience with Zero Trust Network Access technology a plus. Knowledge, Skills, Abilities and Other Characteristics Security operations experience with firewalls, IDS/IPS, log monitoring, SIEM platforms, and related operating systems. Fluent in TCP/IP protocol and networking principles such as switching and routing, and web technologies. Experience with Cisco and Checkpoint networking and security technology. Hands‑on experience with a vulnerability scanner such as Tenable, Nmap, and Qualys, and with network packet analyzers such as Wireshark. Experience with Active Directory, NTFS permissions, LDAP, and RADIUS solutions; familiarity with Linux‑based operating systems. Experience with system hardening procedures for Windows, Linux, and Unix OS. Experience advising on patch management best practices to mitigate vulnerabilities. Ability to work in a team environment and establish effective relationships with vendors, management, staff, and users. Ability to handle multiple engagements with overlapping deadlines and stay current on security issues through research, training, and industry conferences. Benefits Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children; State Retirement Plan and Deferred Compensation Programs (Temporary positions have option to enroll); 15 days paid annual (vacation) leave per year; 15 days paid sick leave per year; Option to designate 10 days of earned paid sick leave per year as family sick leave; 13 paid state holidays; Workers’ Compensation Benefits. #J-18808-Ljbffr State of South Carolina