Information Security Analyst 3

Overview:

Job Title: Information Security Analyst 3 (689939)

Location: Decatur, GA 30038 Hybrid

Duration: Long-Term Contract

Job Summary:

The Information Security Analyst position establishes and supports the technical information security posture of DCSD's information systems. This includes proactive security measures to protect DCSD and school district staff, students, and systems. The Information Security Analyst also assists in reactive investigations and computer forensics as directed by the Chief Information Officer. The position also helps guide Information Security policy, procedure, and education at DCSD. The Information Security Analyst works closely with other technology staff within DIIT to improve the overall Information Security health of schools. This role performs a wide range of professional duties to ensure all best practices related to information security and data privacy are followed at DCSD; conducts deep-dive assessments related to information security compliance, such as FERPA and HIPAA, across multiple systems and processes; advises and trains DCSD staff on standards, laws, policies, regulations, processes, and best practices as it applies to the management of electronic information and data privacy.

The IT Analyst, Sr. job responsibilities would include:

• Monitor and mitigate end devices based on Windows Defender's reporting

• Monitor and mitigate end devices based on SecureWorks Taegis reporting

• Oversee and train staff on update and patch management. These tasks would include Microsoft patches, 3rd party patches, zero-day updates for firewalls and security devices, scheduled firmware updates and VMWare updates.

• Ensure all DCSD devices are enrolled in SecureWorks Taegis

• Ensure mandated DCSD SaaS applications logs are integrated with SecureWorks Taegis

• Ensure DCSD Firewall logs are integrated into the SecureWorks Taegis

• Monitor and mitigate O365 risky users and logins

• Ensure O365 Identity Protection is configured properly to identify and mitigate user risk

• Train DCSD staff on identification and mitigation of security incidents.

• Continuously monitor and improve the district's security posture while preventing, detecting, analyzing, and responding to cybersecurity incidents. Monitoring activities shall include:

• Familiarize itself with the various devices, processes, and applications that need safeguarding within the district's environment.

• Provide continuous, proactive monitoring, such as performing scans of the IT environment 24/7 and reviewing the log of all network activity and communications to flag any abnormalities or suspicious activities and detect threats.

• Utilize monitoring tools to receive alerts of potential threats and then determine the severity of said threats.

• In the event of an incident, the vendor shall work to restore systems and recover any lost or compromised data.

• In the event of an incident, the vendor shall be responsible for investigating the incident to ascertain what occurred, when it occurred, and how it occurred, to take steps and make recommendations to prevent similar problems from occurring in the future.

Required Qualifications

oAny combination of education and experience equivalent to a bachelor's degree in computer science, information technology, information security, or a related field.

oThree (3) years of progressively more responsible experience information technology and/or cybersecurity, some of which shall have been in a lead capacity in information security or a related field.

oAdvanced degree(s) beyond the minimum degree requirement in a relevant field may be considered for some experience.

oPosition may require after-hours work

oKnowledge of theories, procedures, practices, materials, and methods related to cybersecurity compliance.

oKnowledge of applicable local, state, and federal privacy laws and regulations.

oKnowledge of HIPAA, FERPA, and PCI-DSS compliance frameworks.

oSkill in analytics and reporting tools.

oFamiliar with O365, Palo Alto, and Aruba products

oProficiency in data compilation, analysis, and reporting.

Skills:

IT Security,Office 365,secureworks