Information Security Analyst

Information Security Analyst The mission of Yakima County Government is to provide accessible, responsive and responsible public service through leadership and teamwork committed to understanding and meeting public needs. Our Values: Integrity Common Sense Innovation Accountability Position Data: Information Security Analyst-J23-U29-H Regular Non-Exempt (eligible for overtime) Overview: Pay Range: $44.70 - $56.69 per hour (TS Teamsters Pay Plan IT45, Step 1-13) Hiring Range: $44.70 - $47.44 per hour (TS Teamsters Pay Plan IT45, Step 1-4 DOQ) Job Closing Date: Open Until Closed with weekly reviews starting August 10, 2026. There is one Information Security Analyst opening with the Yakima County Technology Services Department. This position is responsible for leading the County's cyber security initiative and developing and implementing network design for a wide variety of journey level network projects. *No Remote Work for this position* Benefits included in position: Health Care Benefits (Medical, Dental, Vision, Basic Life and Basic LTD) Retirement Benefits Paid Vacation Paid Holidays Paid Sick Leave Note: This is a Technology Services Teamsters Contract Bargaining Unit Position. This recruitment may be used to fill future vacancies that occur within 90 days of the closing of this position. (This excludes Yakima County Sheriff's Office and Department of Corrections) Responsibilities: Essential Duties: Network Security: Leads the county Cyber-security preparedness initiative. Assesses current preparedness of county cyber environment and determines the best means to mitigate threats in both the short and long term. Monitors, researches, forecasts and leads the Technology Services team to ensure proper defense and responds to worldwide cyber threats as incident leader when a cyber-attack occurs. Conducts an after action analysis and determines if any corrective action is required. Researches, drafts and recommends corrective action plans to be implemented by those affected and Technology Services. Oversees the remediation of virus and malware infections, to maintain security on the network. Intervenes in network or user level connections when necessary to maintain network security and remediate threats such as viruses, malware, etc. Maintains and operates secure encrypted network access systems for all county fire and law enforcement vehicles and vehicles for all customer law enforcement agencies, in order to facilitate fast public safety response and to access to public safety data systems. Provides the same for all county employees working off-site (telework), in order to increase county employee productivity and for vendor access to county systems and equipment. Creates, develops, and maintains various network documentation, including diagrams, backup equipment configuration information, and security access levels. 2. Implementation and operation of standardized security frameworks (NIST, CIS, CJIS, HIPAA, etc). Establish an inventory of authorized devices and software that can be connected to the network in order to prevent unauthorized devices from being attached to the network and to prevent attacks by malware and viruses. Creates secure configurations for hardware and software on mobile devices, laptops, workstations and servers and network devices such as firewalls, routers, and routers in order to ensure the security of the network. Secures data transmissions and storage, based on the data's content and associated classification, to ensure against theft. Performs gap analysis to identify security areas employees are not adhering to, and use this as a basis for implementing a security awareness program. Establishes an incident response and management process with trained resources for dealing with any adverse event or threat to be able to quickly respond to an attack and restore service to the County. Establishes the processes and tools needed to properly back up critical information to restore County business functions. Establishes a process to ensure that network ports, protocols and services are only turned on when needed, to protect against attacks on the network. Perform continuous vulnerability assessment and remediation to search for security risks and establishes malware defenses to detect/prevent/correct the installation and execution of malicious software on all devices to prevent the corruption and/or theft of County assets. Designs and implements network perimeters and analyzes audit logs to search for successful cyber-attacks. Performs penetration tests and deploys processes and tools to detect/prevent/correct security weaknesses in web applications, software, wireless local area networks, access points and wireless client systems in order to defend against attacks. Establishes controls for which persons, computers, and applications have a need and right to access information based on an approved classification, in order to protect County data. Monitors the use of system and application accounts to ensure accounts of former employees and contractors are removed, to protect against unauthorized network access. Audits administrative network privileges to ensure they have been authorized by a senior executive to ensure network security. Determines which systems and protocols need to be developed to maintain and monitor equipment, computer hardware and software to ensure against data theft, malware and viruses that are compatible with current systems and networks. Determines how to perform gap analysis to identify unsecured areas and to effectively communicate and implement the chosen methods of protection. Determines how to establish controls for users, computers, and applications which have a need and right to access information based on an approved classification. Network Maintenance: Administers, implements, organizes, coordinates, monitors and maintains the daily security operations of multiple enterprise level, countywide level, and customer level networks. Monitors and evaluates countywide network for utilization and other performance parameters to ensure maximum user effectiveness. Utilizes problem solving techniques and advanced network analysis tools and software to trouble shoot, analyze and resolve network outages and performance issues. Determines the most effective way to complete network maintenance tasks, to ensure minimum downtime of network resources, maximizing county employee and customer effectiveness. Selects Technology staff, county employees, or outside resources to be involved in maintenance and operational tasks. Assesses predicted maintenance and operational requirements as they relate to county employee and customer work effectiveness and impact. Provides notification to county departments, outside agencies, and customers regarding network maintenance. Project Design: Designs countywide and enterprise security and network expansions, improvements and upgrades for multiple sites, interconnections, customers and outside services, including internet, state, and regional networks. Establishes the goals of the project(s) to accommodate the needs, growth, and security of countywide departments, agencies, and network locations. Creates specifications for projects to ensure uniformity in county operations and enable project success. Assists with identification of procurement channels to minimize project costs while maximizing project effectiveness. Coordinates with the Network Operations Manager, Customer Project Managers and / or agency stakeholders to establish engineering budget, analysis for network upgrades and develop project scope documentation in order to assure that final project design meets the project goals and to ensure accuracy of estimated costs. Evaluates products, vendors, and services for suitability in network upgrades. Prepares network diagrams, equipment lists, and software required for upgrade projects. When needed, acts as liaison with other departments and agencies, to ensure their network connected systems are installed correctly, securely, and operate smoothly Disaster Recovery Planning: Develops and coordinates technology disaster recovery plans, strategic plans, and security plans with management, co-workers and other county stakeholders by determining which network segments and information are critical to have in the event of a disaster. Determines which procedures will need to be performed to rebuild or restore one or multiple network systems and evaluates when it is better to replace the network system rather than repair it, to decrease downtime after a disaster. Equipment Deployment: Configures, installs and replaces firewalls, switches, routers, radios, UPS's, physical access control systems, network security systems, performance monitoring systems, virus protection software, new appliance integration, and network management systems. Configures network systems and firewalls for maximum performance, to ensure best use of county resources. This ensures the security of county systems. Coordinates closely with the Technology Services team to ensure that the operation, configuration, and maintenance of complex inter-connected network systems operate in a harmonious and integrated manner. Training and Consultation: Provides advanced level network security expertise, and training to other Technology Services staff in network configuration, security systems operation, encryption, and various other technologies. Identifies problems or needs of other TS Department team members, and propose solutions. Advises manager regarding proposed solutions. Other duties assigned: Performs other duties as assigned including secondary support and assistance on network assigned as primary responsibilities to co-workers. Contribute in TS Department meetings, Team meetings, to facilitate best solutions for the department and the county. Studies various resources to maintain expertise, knowledge level, and provide optimum solutions for the team and the county. Education and Experience: Associate degree or two-year technical certificate in Computer Science or Yakima County