Senior Cybersecurity Analyst

Definition

Under general supervision of the Cyber Security Manager, assumes responsibility for the implementation and maintenance of security processes and technology improvements in support of the organization's Cyber security Strategic Plan. Works cohesively with the IT teams and divisions to conduct risk assessments, administer and audit security systems. As a member of the security team develops, implements and maintains security architecture design as well as maintains the technologies and processes that support continuous security improvements. This job class is treated as FLSA Exempt. Essential Functions : Essential functions may vary among positions and may include the following tasks and other characteristics. This list of tasks is ILLUSTRATIVE ONLY and is not intended to be comprehensive listing of tasks performed by all positions in this classification.

Examples of Tasks

1. Mentoring, Supervision & Leadership: Mentors security team staff so they attain the technical skills and customer service skills along with experience necessary to perform independently and attain further career progression goals.

• • Ensures cross-functional training of staff to ensure that primary and secondary support personnel are properly trained to support division services.
  • Assists with the routine supervision of assigned staff. Prioritizes and coordinates staff workflow and provides training and assistance as needed.
  • Helps establish criteria for employee performance evaluations based on division and department goals and objectives.
  • Helps prioritize and coordinate staff workflow and provides training and assistance as needed.
  • Provides senior leadership to the Security Team staff and works closely with other IT divisions to establish and enforce IT standards. Evaluates and recommends best in class standards and processes.

2. Security Team Member: Participates as a key member of the security team in setting organizational security direction.

• • Contributes knowledge of security best practices and technical skills. Utilizes problem-solving techniques during security planning, implementation and incident response activities.
  • Assumes responsibility for protecting all confidential information discussed, documented or otherwise provided in the course of security events.

3. Network Security Support: Proactively audits and reviews the network and security infrastructure.

• • Ensures that scheduled maintenance, patching and performance is monitoring and managed.
  • Monitors LAN/WAN, network, security firewalls, routers and systems to ensure security standards are maintained.
  • Provides operational reporting that effectively communicates the security posture of the SRPMIC organization.
  • Provides technical input and assistance to troubleshoot security issues.

4. Cloud Security: Develops and maintains cloud security standards, controls, and processes to ensure the confidentiality, integrity, and availability of organizational systems and data hosted in cloud environments.

• • Performs security assessments of cloud infrastructure, services, architectures, and configurations to identify and mitigate security risks.
  • Provides cybersecurity SME support for cloud migrations, implementations, and technology initiatives.
  • Establishes and maintains cloud security standards, configuration baselines, and best practices aligned with the organization's adopted security framework.
  • Monitors cloud environments for security threats, vulnerabilities, misconfigurations, and anomalous activity and coordinates remediation efforts.
  • Partners with IT and business stakeholders to implement appropriate controls for identity and access management, logging and monitoring, encryption, network security, and data protection.
  • Provides reporting and metrics regarding the security posture and risk of organizational cloud environments.

5. Artificial Intelligence Security: Provides cybersecurity leadership and subject matter expertise for the secure adoption, implementation, and use of artificial intelligence technologies throughout the organization.

• • Develops and maintains security standards, policies, and guidelines governing the secure and responsible use of AI technologies.
  • Performs security and risk assessments of AI solutions, applications, platforms, and third-party AI services.
  • Identifies and evaluates AI-related security risks, including data exposure, unauthorized access, insecure integrations, prompt injection, data poisoning, model misuse, and third-party risks.
  • Evaluates AI vendors and services to ensure security, privacy, data protection, and contractual requirements are appropriately addressed.
  • Monitors emerging AI security threats, vulnerabilities, regulatory requirements, and industry best practices and recommends appropriate security controls.
  • Provides cybersecurity SME support for AI-related projects, audits, vendor reviews, incident investigations, and organizational AI governance initiatives.

6. Security Risk Assessments: Develops and implements security, technology and assessments based on the organization's selected security framework.

• • Develops and maintains adopted security standards and industry best practices.
  • Works closely with internal stakeholders and security leadership to build and maintain an effective security program to protect the confidentiality, integrity and availability of IT assets to help mitigate overall organizational risks.

7. Investigation Support: Responds to security breaches or personnel investigation requests.

• • Ensures accurate data capture, chain of custody and reporting for an incident or investigation.
  • Provides leadership, consultation or technical support.
  • Maintains confidentiality and integrity of systems, data and security processes.

8. Project Coordinator and SME

• • Fulfills all duties as the Cyber Security subject matter expert in support of IT and external departmental projects.
  • Fulfills all duties as the Cyber Security subject matter expert in support of 3 rd part audit engagements.
  • Leads Cyber Security team projects and initiatives to include security tool integrations, tool evaluations, and process improvements.

9. Audit and Compliance

• • Participates in audit reviews.
  • Participates and fulfils a lead role in security penetration activities and the coordination of mitigation and remediation efforts.

10. Other Duties as Assigned: Performs other job-related tasks as assigned by the Cyber Security Manager, IT Assistant Director Enterprise Architecture, Custom Development & Cyber Security, or IT Director/CIO. Knowledge, Skills, Abilities and Other Characteristics:

• Ability to assess security vulnerabilities at the system and/or network level.
• Ability to coordinate vulnerability mitigation efforts across multiple teams
• Ability to assess and document risk related to third party system and/or software integrations
• Ability to manage and leverage security tools to reduce organizational risk
• Ability to lead and coordinate team level projects and programs with little to no oversight
• Ability to work independently and make well informed decisions based on experience and data gathering
• Ability to assess cloud environments for security vulnerabilities, misconfigurations, and compliance risks.
• Ability to evaluate cloud architectures and services for adherence to organizational security standards and industry best practices
• Ability to assess security risks associated with cloud migrations, integrations, and implementations.
• Ability to assess cybersecurity and data protection risks associated with the implementation and use of artificial intelligence technologies
• Ability to evaluate AI solutions, applications, and third-party AI services for security risks and compliance requirements
• Knowledge of the Elastic Stack and the ability to leveraging multiple log sources to identify security risk and/or compromise
• Knowledge of secure protocols and how, when, and where they should be implemented
• Knowledge of Microsoft 365 Cloud security suites to include: 365 Defender, Purview/Compliance, Azure, Defender for Cloud, and Microsoft Entra ID
• Knowledge of AI security risks including data exposure, unauthorized access, prompt injection, data poisoning, model misuse, insecure integrations, and third-party AI risks
• Knowledge of AI governance, risk management, data protection, and responsible AI principles.
• Knowledge of industry regulations and data classification standards i.e.: HIPAA, PCI, PII, PHI and FERPA
• Knowledge of CIS, NIST and FedRamp controls/standards.
• Knowledge of firewall rules and audits
• Skilled at providing outstanding internal and external customer service.
• Skilled at interfacing at all staff levels and providing effective verbal and written communication.
• Skilled at verbal & written communication.
• Skilled at defining issues, analyzing and evaluating information, presenting recommendations and identifying alternative solutions.
• Ability to work effectively across and within diverse teams.
• Ability to effectively manage simultaneous security issues.
• Highly self-motivated and directed combined with extensive experience working in a collaborative, team-oriented environment.

Minimum Qualifications

Education: A Bachelor's degree from an accredited college or university in Information Security, Cyber Security or related discipline. Maybe accept a combination of 7 years direct cyber security experience and industry certifications in lieu of degree. Experience:

• Five (5) years' experience with the following:
  • Direct experience working within an IT/Cyber security role. Hands-on experience implementing network security, security monitoring, cloud security monitoring, or vulnerability management.
  • Direct experience supporting Microsoft 365 Cloud security.
  • Direct experience assessing, evaluating, or supporting the secure implementation and use of artificial intelligence technologies, including identification and mitigation of AI-related cybersecurity and data protection risks.
  • Direct experience with the Elastic log management platform.
  • Direct experience supporting cyber security incident response.
  • Direct experience managing and/or mitigating software and system vulnerabilities.
  • Direct experience conducting security audits to include access control and system configuration.
  • Direct experience conducting security assessment on 3 rd party integrations.
  • Direct experience with secure remote access technologies.
• One of the following certifications is required:
  • CompTIA Security +
  • Systems Security Certified Practitioner (SSCP)
  • Certified Information Systems Security Professional (CISSP)
• Two of the following certifications is preferred:
  • CompTIA Security +
  • Systems Security Certified Practitioner (SSCP)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Cloud Security Professional (CCSP)
  • Certified Information Security Manager (CISM)
  • SANS Global Information Assurance Certifications (GIAC)
  • Certified Ethical Hacker (CEH)
  • Microsoft Azure Security Engineer Associate AZ-500
  • Microsoft Cloud and AI Security Engineer Associate SC-500

Equivalency: Any equivalent combination of education and/or experience that would allow the candidate to satisfactorily perform the duties of this position, will be considered. Underfill Eligibility: An enrolled Community Member whom closely qualifies for the minimum qualifications for a position may be considered for employment under SRPMIC Policy 2-19, Underfill.

Special Requirements

• May be required to work beyond normal work hours including nights, weekends and holidays.

• May be required to complete and Salt River Police Department (SRPD) background investigation and polygraph examination.
• May be required to receive and maintain a Salt River Pima-Maricopa Indian Community, Community Regulatory License, and State Certification (ADOG). All applicants applying for jobs will be subject to Pre-Employment Drug Test and extensive Fingerprint and Background Check. In addition, all employees providing services to a campus with children will be subject to the "Community Code of Ordinances", Chapter 11 "Minors", Article X. "Investigation of Persons Working with Children", random drug testing and completion of a background check every five (5) years.

Prior to hire as an employee, applicants will be subject to drug and alcohol testing. Will be required to pass a pre-employment background/fingerprint check.

"SRPMIC is an Equal Opportunity/Affirmative Action Employer" Preference will be given to a qualified : Community Member Veteran, Community Member, Spouse of Community Member, qualified Native American, and then other qualified candidate.

In order to obtain preference, the following is required: 1) Qualified Community Member Veteran (DD-214) will be required at the time of application submission 2) Qualified Community Member (must provide Tribal I.D at time of application submission),3) Spouse of a Community Member (Marriage License/certificate and spouse Tribal ID or CIB is required at time of application submission), and 4) Native American (Tribal ID or CIB required at time of application submission).

Documents may be submitted by one of the following methods:

1) attach to application

2) fax View phone number on click.appcast.io

3) mail or hand deliver to Human Resources.

4.) email to View email address on click.appcast.io

Documentation must be received by position closing date.

The IHS/BIA Form-4432 is not accepted .

Your Tribal ID/CIB must be submitted to HR-Recruitment-Two Waters.

Benefits

Salt River Pima-Maricopa Indian Community Employee Benefits Overview

Salt River Pima-Maricopa Indian Community (SRPMIC) is committed to supporting the health, well-being, and financial security of our employees. We offer a comprehensive benefits package to employees, designed to enhance your quality of life both at work and at home. Below is a summary of the benefits available to SRPMIC employees. Plan details and eligibility requirements are provided upon hire and are subject to change.

Health Care Benefits

SRPMIC provides medical, dental, vision, and life insurance coverage for all regular full-time employees enrolled in standard plans. These benefits represent a significant part of your total compensation.

Medical : Choose from three plan options to fit your needsthe Low Deductible Plan, the Mid-Deductible Plan, and the High Deductible Health Plan (HDHP) with a Health Savings Account (HSA). As a self-funded plan, SRPMIC directly covers the cost of medical, pharmacy, dental, and vision services for all participants.

Dental : Enjoy nationwide access to the Humana Dental PPO/Traditional Preferred network, offering flexibility and choice in selecting dental care providers.

Vision : Coverage is provided through Davis Vision, including eye exams, lenses, frames, and contact lenses. Members also benefit from discounted rates on additional eyewear and services.

Life Insurance : All eligible employees are automatically enrolled in a fully paid basic term life insurance policy with a matching accidental death benefit.

Retirement Plans

SRPMIC supports your long-term financial goals through multiple retirement plan options:

401(k) and Roth Plans : Eligible employees can participate in both pre-tax and post-tax retirement savings plans. SRPMIC contributes 5% of your compensation to the pre-tax 401(k) and matches up to 3% of your salary deferral contributions.

Public Safety Personnel Retirement System (PSPRS): Available to eligible certified police officers and firefighters.

Arizona State Retirement System (ASRS): Available to Salt River School educators.

Health Reimbursement Arrangement (HRA): A retiree HRA with Health Equity, which is a tax-advantaged employer-funded account that retired employees (Age 55+) can use for qualified medical expenses, including some premiums, and out-of-pocket expenses such as copays and deductibles.

Paid Leave & Holidays

Annual & Sick Leave: Employees accrue separate balances for sick and annual leave each pay period. Sick leave may be used for personal or family illness and medical appointments, while annual leave covers vacation or personal time.

Holidays: SRPMIC observes 15 paid holidays each year, including two discretionary holidays and one day of birthday leave.

Other SRPMIC Paid Benefits

Short-Term Disability

Long-Term Disability

Employee Assistance Program (EAP)

SRPMIC offers a confidential Employee Assistance Program through SupportLinc, available at no cost to employees, their dependents, and household members.

Additional Voluntary Benefits

WellPath Wellness Program: A voluntary wellness initiative that encourages healthy living and rewards participation with incentives. Available to all employees and their dependents.

Flexible Spending Accounts (FSA ): Administered by HealthEquity, FSAs allow you to pay for eligible health and dependent care expenses with pre-tax dollars.

Health Savings Account (HSA): Available to employees enrolled in the HDHP.

Supplemental Life & AD&D Insurance: Employees may purchase additional life and accidental death coverage for themselves and their dependents.

Public Service Loan Forgiveness (PSLF): SRPMIC is a qualified employer under the PSLF program. Employees may be eligible for federal student loan forgiveness.

At SRPMIC, we value our employees and are proud to offer benefits that support your health, well-being, and future.