Information Security Analyst

Information Security Analyst

With general oversight from the IT Director, the Information Security Analyst designs, implements, and supports the security infrastructure for a wide variety of Henry County Water Authority (HCWA) IT systems and operational needs. This position will work with the IT team to ensure the confidentiality, integrity, and availability of site-wide communication networks, servers, and data backup systems. The position will play a key role in hardening enterprise servers, desktops and securing network physical components and logical switch configurations against modern threats. Additionally, this position will evaluate, configure, and maintain security software across departments - both server and client-side. The analyst proactively recognizes security vulnerabilities and risks, works with management to develop a course of action, and follows through to completion with a minimum of supervision. This role mentors other employees of HCWA on security best practices and must handle multiple projects concurrently, adjusting priorities dynamically while responding to high-priority security issues and incidents.

Essential duties and responsibilities include the following. Other duties may be assigned.

• Designs, implements, documents, and supports security configurations and hardening standards for Windows Server Network Operating Systems, corresponding hardware, application software, and system management tools.
• Continuously monitors enterprise systems, network infrastructure, and connected devices to identify outstanding patch requirements and security gaps.
• Utilizes ARMIS, EDR, and other security information and event management (SIEM) utilities to monitor network traffic, endpoint behavior, and IoT/OT environments for suspicious activity.
• Contains, mitigates, and remediates identified threats and vulnerabilities in collaboration with the wider IT and infrastructure teams.
• Maintains comprehensive visibility of all assets on the network (managed, unmanaged, and IoT) using asset intelligence platforms to ensure total security coverage.
• Works with other HCWA departments to provide technical assistance to help them meet their goals. As required, provides front-line helpdesk support on a variety of IT issues and serves as a backup to others in IT.
• Works with vendors on implementations and support issues, serving as an interface between our internal clients and the vendor.
• Installs, configures, evaluates and recommends new technologies with minimal impact on existing systems or other job duties.
• Proactively monitors and provides timely and accurate input to the call tracking system to resolve all open tickets in a minimum time frame. Documents processes, system configurations, policies and procedures in a shared document tracking system.
• Occasional after-hours/weekend work will be required for emergency on-call security situations, incident response, or to minimize patch impact to end-users.

Education and/or Experience: Bachelor's degree in Computer Science or related IT field from four-year college or university; and at least seven (7) years professional working experience in the IT field; or equivalent combination of education and experience.

Experience with firewalls, asset discovery and cyber exposure tools, and network visibility platforms is required, as is familiarity with common attack vectors, the MITRE ATT&CK framework, and effective containment strategies. Solid understanding of operating systems (Windows, Linux) and networking and network protocols (TCP/IP, DNS, DHCP, OSPF, etc.) also required. Microsoft 365 Tenant Administration and scripting skills (e.g., Bash, PowerShell, or Python) for log filtering and task automation is a strong plus.

This position is hands-on management of the various supported technologies, with vendor support as a backup when atypical situations are encountered.

Certificates, Licenses, Registrations: Valid Georgia Driver's License. Relevant certifications are a plus but not required: CompTIA Security+, CySA+, GIAC (GSEC/GCIH), or CEH.

Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this Job, the employee is regularly required to sit; use hands to handle or feel and talk or hear. The employee is occasionally required to stand; walk; reach with hands and arms; climb or balance and stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move more than 100 pounds. Specific vision abilities required by this job include close vision, color vision, depth perception and ability to adjust focus.

Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this Job, the employee is occasionally exposed to moving mechanical parts; high, precarious places; fumes or airborne particles; toxic or caustic chemicals; outside weather conditions and risk of electrical shock. The noise level in the work environment is usually quiet.