Security Analyst

IT Security Analyst IThe city of Las Vegas is accepting applications for IT Security Analyst I. This position performs professional information security work enforcing information security practices and protocols; maintains and helps deploy the city's cyber security platform and solution efforts as well as perform network and host threat assessments to identify, evaluate and mitigate security risks, threats and vulnerabilities; works with the city staff to develop action plans to mitigate identified vulnerabilities and promote security initiatives and; participates in team activities, including threat management, vulnerability management, assessments, audits, incident response, disaster recovery planning, end user education and network security monitoring.Idea candidate:Organized, dependable, and able to manage multiple assignments simultaneously.Enjoys reviewing information, solving problems, and identifying clear next steps.Comfortable learning new technologies, security tools, requirements, and work processes.Strong desire to learn and grow, even if they have not worked in every area covered by the position.Self-starter who can research unfamiliar issues, understand what is needed, and move work forward.Maintains clear, accurate notes, records, and supporting documentation.Can explain technical or compliance issues in a way that others can easily understand.Exercises good judgment and knows when an issue can be handled independently and when it should be escalated.Cybersecurity duties may include reviewing security alerts, investigating potential incidents, working with security tools, identifying weaknesses, and helping protect City systems and information. These activities often require coordinating with infrastructure teams, application owners, and departmental staff to verify details, gather information, and resolve issues.Compliance duties may include verifying that various controls are being followed, gathering documentation for audits, writing and updating policies and procedures, tracking findings, and working with departments to remediate issues. Candidates should be comfortable communicating with stakeholders across the organization, clarifying requirements, supporting audit requests, and helping departments understand and meet compliance obligations.This is not a position focused solely on cybersecurity tools or incident response. Applicants should be interested in technical security work as well as audits, documentation, policies, compliance reviews, the change control process, continuity of operations, and detailed follow-up.Selection Process Final candidate selection will include list placement and may include hiring interview and assessment (if applicable). Any individual offered employment will be required to pass a pre-employment drug test, complete background check, and may be required to demonstrate the ability to perform the physical requirements of the job. Some positions may require preliminary background checks. The purpose of this recruitment is to establish an eligible list for current and/ or future openings which may include part-time or full-time positions.Example of DutiesDistinguishing Characteristics IT Security Analyst I: This is the entry-level class within the Security Analyst series. Employees within this class are distinguished from the Security Analyst II by the amount of cyber security experience an individual has, as well as the performance of more routine tasks and duties. This class may be used as a training class, wherein employees have limited cyber security experience, and therefore receive instruction and assistance in cyber security principles, techniques and practices. Supervision Received and Exercised Receives direction from the Information Technologies Section Manager. Essential Functions:Work at the direction of the IT Section Manager to improve information security for the city.Install, configure and administer security systems and tools.Work with and provide information and guidance to security service providers. Monitor performance of security services providers and provide feedback to the IT Section Manager. Participate in regular calls with security services providers to ensure optimal performance from service providers.Conduct proactive research to identify and understand new threats, vulnerabilities, and exploits. Provide recommendations to management concerning cyber security issues.Ensure department disaster recovery and business continuity and related plans are reviewed on a regular basis and kept up-to-date.Perform security scans of network devices and systems.Analyze logs to improve system and network performance, isolate and detect failures, and identify security vulnerabilities or malicious activity.Respond to security incidents and report on incident handling and resolution.Provide Incident Response (IR) support when analysis confirms actionable incident.Create and maintain documentation of information security policies, procedures, reports, processes and diagrams.Participate in developing and implementing departmental and citywide policies relating to cyber security and compliance topics. Assist with the enforcement of security policies and procedures by monitoring system activity and by conducting both periodic and ad-hoc audits and reviews.Review security violation reports and investigate possible security exceptions.Provide analysis of information security related events and incidents; independently address cyber security events as needed in order to prevent further compromise of technical assets and data.Provide threat and vulnerability analysis as well as security advisory services.Analyze and respond to previously undisclosed software and hardware vulnerabilities.Investigate, document and report on information security issues and emerging trends, including current or proposed legislation, laws and regulations related to information security to determine applicability and impact to city operations.Provide assistance to the City Auditor's Office, Human Resources, City Attorney's Office, external auditors, and external attorneys as required for investigations, legal discovery and open records requests.Support and assist the development of baseline infrastructure and application hardening guides based on industry best practices.Collaborate with technology and business teams to ensure that the implementation of new technologies and security solutions can be supported and that they are in alignment with security architecture, industry best practice, principles of secure design, and business strategies.Determine security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; and preparing cost estimates.Performs related duties and responsibilities as required.Minimum RequirementsIT Security Analyst I Experience: Three years of general IT experience. Experience working specifically in IT security is desirable. Training: Bachelor's degree from an accredited college or university with major in computer science, telecommunications, management information systems or related fields. May substitute a combination of equivalent education and related experience. The city assesses 1.5 years of fulltime experience as equivalent to one year of education. License or Certificate: One or more of the following certifications (or equivalent) is preferred on the date of application:CompTIA Security+Certified Ethical Hacker (CEH)Global Information Assurance Certification Security Essentials Certification (GSEC)Certified Information Systems Security Professional (CISSP)Certified Information Security Manager (CISM)Certified Information Systems Auditor (CISA)Knowledge, Skills and AbilitiesIT Security Analyst I Knowledge of: Microsoft Word, Project, Excel, PowerPoint and Visio. Basic understanding of systems including but not limited to Microsoft Windows. Basic understanding of network switches, routers and firewalls. Basic knowledge of various security concepts, and technical security solutions, such as firewall and IDS/IPS, anti-virus, and spam filtering. Common Internet protocols and applications. Ability to: Treat sensitive information with the highest degree of confidentiality and discretion. Advise users in the application of security processes. Work under pressure, and meet deadlines individually and collaboratively. Think logically, assess problems, and be results-oriented. Exercise independent judgment and discretion when dealing with cyber security events, particularly during off hours when management personnel may not be available to provide direction or feedback. Quickly learn and understand new technologies. Communicate effectively, both orally and in writing, to interact with team members, customers, management and support personnel (technical and non-technical). Communicate clearly and concisely, both orally and in writing. Establish and maintain effective working relationships with those contacted in the course of work. Competencies: Core Workforce Competencies Professionalism – Demonstrates core values by being honest, respectful and positive. Effective Communication – Expresses verbal and written thought in a clear and understandable manner. Customer Focus – Demonstrates genuine concern and satisfies external and/or internal customers based on the CLV core purpose and values. Adaptability – Able to effectively modify behavior to suit changing workforce demands. Problem Solving – Solves problems by considering all causes, solutions and outcomes. Productive Partnerships – Develops, maintains and strengthens partnerships with others. Technical and Safety Expertise – Possesses a depth of knowledge, skill and ability in a technical (job) area.