Cyber Security Analyst

Position Overview Requirements And Preferences The Broward County Board of County Commissioners is seeking qualified candidates for the position of Cyber Security Analyst in the Aviation Information Technology - Program Management Division. Benefits of Broward County Employment Eleven (11) paid holidays each year Vacation (Paid Time Off) = 2 weeks per year Tuition Reimbursement (Up to 2K annually) Up to 40 hours of Job Basis Leave for eligible positions Paid Parental Leave High-Deductible Health Plan – bi-weekly premiums: Employee $10.90 / Family $80.79 Includes a County Funded Health Savings Account of up to $2000 annually Consumer Driven Health Plan – bi-weekly premiums: Employee $82.58 / Family $286.79 Florida Retirement System – Pension or Investment Plan 457 Deferred Compensation County matches up to $2,000 a year General Description This is an advanced position requiring a high level of technical skills that will evaluate Enterprise information technology access requests for the enterprise network to determine conformance to County Administrative Policies and Procedures while referencing industry best practices and frameworks related to PCI, FIPS, and NIST Cyber Security Framework. Advanced skills to create, review, and revise network documentation as required for compliance and best practices in all aspects of network security are required at this position. The person at this position will be performing/analyzing vulnerability scans, monitor threat intelligence feeds, provide recommendations on remediation, and coordinate response with Network Operations Center, Security Operations Center and other authorized agencies. Also the person at this position will participate in management for Intrusion Prevention (IPS/IDS), Next Generation Firewall (NGFW), and Network Access Control Security Solutions deployed on an 802.1x enabled network with device profiling. A thorough understanding of data flow and data logging in SPLUNK, as well as the configuration of automated responses from Cisco centric network security access controls, is required. Minimum Education and Experience Requirements Bachelor's degree or higher in computer science, engineering, mathematics, or related field One year of relevant experience may be substituted for each year of required education Requires two years prior work experience working within an information technology security department with firewalls, data protection, data classification identification and associated applied security controls, security information event management software, web content filtering tools, scanning application, and other IT security devices, tools, and software Special Certifications and Licenses Cisco Certified Network Associate Enterprise Cisco Certified Network Professional Enterprise/Security AWS Certifications such as Cloud Practitioner, Solution Architect Associate or Security Specialist Criminal Justice Information Services Cyber Security Certifications or GIAC Security Certifications Microsoft Azure Certifications – Fundamentals, Administrator or Security Engineer or ITIL Certification Preferences Master's degree in Information Systems or related field Doctorate Degree in Information Systems or related field Minimum two (2) years of experience working with airport specific applications Minimum two (2) years of experience with API integrations between multiple security products Minimum two (2) years of experience with administrative level access to LINUX systems Minimum two (2) years of experience with data logging in SPLUNK Minimum two (2) years of experience with access controls for VPN and MFA solutions, Cisco DUO Additional Information All candidates must complete an extensive ten (10) year work history verification and criminal background check (please include the last 10 years of work history on application). Per the Code of Federal Regulations, Title 49, Part 1542, all airport employees must undergo a Criminal History Records Check (CHRC) and a Security Threat Assessment (STA) in order to obtain a Security Identification Display Area (SIDA) Badge, as required by the Transportation Security Administration (TSA). Duties and Responsibilities Evaluate Enterprise information technology access requests for the enterprise network to determine conformance to County Administrative Policies and Procedures while referencing industry best practices and frameworks related to PCI, FIPS, and NIST Cyber Security Framework Perform Aviation network vulnerability management scanning for Aviation networks and provide reports to designated staff for remediation Analyze and research Aviation network vulnerability analysis reports for security risks and recommend feasible and appropriate actions to mitigate Analyze County-wide vulnerability analysis reports for security risks and recommend feasible and appropriate actions to mitigate Monitor threat intelligence from DHS, CISA, and MS-ISAC creating actionable incidents to elevate for remediation to mitigate risk to the Aviation or County network Work with various Aviation IT stakeholders including sections, other divisions, and vendors to securely authorize the use of Aviation requests regarding governance, compliance and privacy Create, review, and revise documentation including policies and procedures as required for compliance and best practices in all aspects of information and cybersecurity Act as on-call Security and Compliance team member to respond to threat intelligence and/or incidents Act as security point of contact (SPOC) for security, privacy, and governance matters Act as designee in the absence of the division's Information Technology Security Administrator Perform other assigned work-related tasks as directed by BCAD Management Competencies Tech Savvy: Anticipates and adopts innovations in business-building digital and technology applications. Skillfully determines the technologies and innovations that will be most beneficial. Makes learning new technologies a regular part of the team activities, creating both capabilities and enthusiasm. Manages Complexity: Makes sense of complex, high quantity, and sometimes contradictory information to effectively solve problems. Asks questions to encourage others to think differently and enrich their analyses of complex situations. Accurately defines the key elements of complex, ambiguous situations. Action Oriented: Takes on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm. Takes immediate, decisive, independent action to resolve issues or problems. Persists as needed. Quickly and consistently identifies and pursues beneficial new opportunities. Ensures Accountability: Holds self and others accountable to meet commitments. Measures and tracks team's and own performance, and helps the team learn from success, failure, and feedback. Adheres to, and enforces, goals, policies, and procedures. Communicates Effectively: Develops and delivers multi-mode communications that convey a clear understanding of the unique needs of different audiences. Listens attentively and takes an interest. Keeps others well informed; conveys information clearly, concisely, and professionally when speaking or writing. Courage: Steps up to address difficult issues, saying what needs to be said. Readily shares own ideas and opinions on controversial topics; is comfortable with open debate and constructive criticism. Demonstrates clear conviction in adversity; persists courageously in difficult circumstances. Self-Development: Actively seeks new ways to grow and be challenged using both formal and informal development channels. Demonstrates a strong commitment to development by regularly practicing and applying new knowledge and skills; is quick to share new learning with others. Creates a thorough, detailed development plan. Nimble Learning: Learns through experimentation when tackling new problems, using both successes and failures as learning fodder. Gives people opportunities to try new things; urges people to try new ways to find best solutions. Helps the team leverage the lessons from their successes and failures when facing new situations. Work Environment Physical demands refer to the requirements for physical exertion and coordination of limb and body movement. Performs light work that involves walking or standing most of the time and involves exerting up to 20 pounds of force on a regular and recurring basis, or skill, adeptness and speed in the use of fingers, hands or limbs on repetitive operation of mechanical or electronic office equipment within moderate tolerances or limits of accuracy. Unavoidable hazards: None County Core Values Collaborates: Building partnerships and working collaboratively with others to meet shared objectives. Customer focus: Building strong customer relationships and delivering customer-centric solutions. Instills trust: Gaining the confidence and trust of others through honesty, integrity, and authenticity. Values differences: Recognizing the value that different perspectives and cultures bring to an organization. Equal Opportunity Employment and ADA Compliance Broward County is an Equal Opportunity Employer committed to inclusion. Broward County is committed to providing equal opportunity and reasonable accommodations to qualified persons with disabilities. We support the hiring of people with disabilities; therefore, if you require assistance due to a disability, please contact the Professional Standards Section in advance at View phone number on click.appcast.io or email View email address on click.appcast.io to make an accommodation request. #J-18808-Ljbffr