Sr. Information Security Analyst

Job Summary: The Senior Cybersecurity Administrator is responsible for leading multiple enterprise security services while ensuring technical solutions adhere to various compliance frameworks and regulations such as Payment Card Industry-Data Security Standard (PCI-DSS), National Institute of Standards and Technology (NIST), etc. This includes assessing, planning, and implementing security measures to help protect from security breaches and attacks on the Metropolitan Nashville Airport Authority's (MNAA) computer networks and systems. Other responsibilities include but are not limited to vulnerability management, intrusion detection/prevention, firewalls, and security information and event management. Potential for on-call availability under some circumstances is required. Accepting Applications Until Filled Salary Range: $84,911- $146,140 *Final salary offer will be based on relevant skills and experience to the position. Plays a lead role in prompt and effective response to information security incidents. Performs analysis and response to tier II and III security relevant alerts and events. Successfully manages PCI compliance, which should include but not limited to, knowledge in complying with PCI standards. Gathers PCI related requirements and information regarding continuous compliance assurance; analyzes and evaluates needs and provides recommendations; provides documentation of requirements. Collects, assesses, and reports upon relevant threat intelligence / actionable security information and appropriately modifies tactical operations accordingly. Meets network firewall security work standards by following production, productivity, quality, customer-service, safety, security, and health standards; resolving operational problems; identifying work process improvements. Diagnoses and resolves issues with firewalls, virtual private network (VPN) gateways, wireless networks, and virtual local area network (VLANS). Analyzes firewall security requirements by studying user requirements; conducting system security and vulnerability analyses and risk assessments. Assesses network traffic patterns and session data for indicators of malicious activity; takes initiative to drive procedural or technical change within the enterprise environment. Identifies business risk and advises appropriate business contacts as required to treat such risk. Supports the automation and improvement of the overall Information Security posture at MNAA. Assists with executing remediation plans for any gaps reported in audits or recommended process improvements that effect core information security services. Serves as a leader in technical space, which proactively seeks out new technical solutions, identifying gaps, understanding risk-based prioritization within the greater security and risk function, etc. Working knowledge of Unix, Linux and Windows operating systems. Confirms administrative information systems by developing and conducting tests; auditing system performance. Supports other Security & Risk program efforts within MNAA. Follows all safety regulations. Maintains regular and on-time attendance. Supports MNAA’s commitment to its culture and values, including Respect, Integrity, Service and Excellence (RISE). Performs other duties as assigned. Qualifications: Required: Bachelors degree in Computer Science, Management Information Systems, or relevant field of study. 7-10 years of relevant work experience with minimum of a high school diploma may be considered in lieu of educational requirement 2-4 years of progressive experience in computing and information security, including experience with Internet technology, security technology, issue resolution and leading teams in a cross functional, Valid Class D drivers license Preferred: Masters degree in Computer Science, Information Systems, or a related field CISSP, GSEC, GCIA, GCIH, GCFA, or other security related certifications #J-18808-Ljbffr Metropolitan Nashville Airport Authority