CYBERSECURITY ANALYST

Requisition No: 879952


Agency: Department of Health

Working Title: CYBERSECURITY ANALYST

Pay Plan: Career Service

Position Number: 64002213


Salary: $70,000.00 - $85,000.00


Posting Closing Date: 08/05/2026


Total Compensation Estimator Tool

Department of Health

Office of Information Technology

Security Administration Team

**Open Competitive Opportunity**

Full-time Career Service Position

Annual Salary: $70,000.00 - $85,000.00

*Anticipated Vacancy*

The Florida Department of Health is seeking a highly motivated Cybersecurity Analyst to join the Office of Information Technology. This position plays a critical role in defending one of Florida's largest public-sector technology environments, protecting the systems and data that support statewide public health programs, County Health Departments, healthcare partners, and millions of Floridians.

If you thrive in a fast-paced Security Operations Center (SOC) environment, enjoy investigating sophisticated cyber threats, and want your work to have a direct impact on public health and safety, we encourage you to apply.

This position serves within the Security Administration section of the Office of the CIO and supports enterprise cybersecurity operations across the Department.

Your Specific Responsibilities:

This position serves as a Cybersecurity Analyst. The position supports the Department's cybersecurity operations for Headquarters, divisions, and County Health Departments and coordinates with Department IT staff, the Office of Inspector General, approved service providers, and other authorized internal and external stakeholders.

• Monitor, analyze, investigate, and respond to cybersecurity alerts and incidents across enterprise systems.
• Perform security event correlation using data from endpoints, servers, identity systems, Microsoft 365, cloud platforms, networks, SIEM, EDR, and other security technologies.
• Conduct incident triage, containment, eradication, recovery, and post-incident analysis.
• Perform proactive threat hunting to identify indicators of compromise and emerging threats before they impact the organization.
• Document the complete incident lifecycle, including evidence, timelines, technical findings, remediation activities, and executive reporting.
• Analyze cyber threats, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and recommend improvements to strengthen the Department's security posture.
• Configure, tune, and optimize enterprise cybersecurity technologies in accordance with approved security standards and change management procedures.
• Support enterprise risk management by identifying control gaps, assisting with security assessments, and tracking remediation efforts.
• Maintain incident response playbooks, standard operating procedures, and operational metrics.
• Collaborate with Department leadership, IT teams, County Health Departments, the Office of Inspector General, vendors, and external partners during cybersecurity investigations and response activities
• Performs other assigned duties, including emergency response, continuity support, administrative responsibilities, and other activities supporting the unit and agency mission.

Required Knowledge, Skills, and Abilities:

Proficient computer skills to include Word, Excel, PowerPoint and Outlook; knowledge of monitoring processes and/or working with ticketing software; knowledge of computer data bases; knowledge of laws, legal codes, court procedures and government rules & regulations; knowledge of the structure and content of the English language including the meaning and spelling of words, rules of composition, and grammar; understanding written sentences and paragraphs in work related documents; communicating effectively with others verbally and in writing; talking to others to effectively convey information; ability to establish and maintain effective working relationships with others; listening to what other people are saying and asking questions as appropriate; conduct fact-finding research; knowledge of the methods of data collection and analysis; organize data into logical format for presentation in reports, documents and other written materials; knowing how to find information and identifying essential information; finding ways to structure or classify multiple pieces of information; ability to plan, organize and prioritize work assignments; ability to work independently; ability to maintain a high degree of accuracy and close attention to detail; ability to maintain confidentiality; knowledge of the cybersecurity incident-response lifecycle; security operations and agency-adopted incident-response and risk-management frameworks; SIEM and EDR technologies; Microsoft 365, identity, endpoint, server, network, and cloud telemetry; Windows and Linux fundamentals; common network protocols; threat intelligence; vulnerability management; malware behavior; digital forensics; evidence handling; access control; and change management; skill in security alert triage, log correlation, incident investigation, threat hunting, incident documentation, security-tool configuration and tuning, scripting and automation, network and process analysis, technical writing, and the use of Department-issued computing equipment, ticketing systems, and approved cybersecurity platforms; ability to assess incident scope, severity, and business impact; manage concurrent incidents and competing priorities; exercise sound judgment under time-sensitive conditions; maintain complete and accurate records; support after-hours cybersecurity response when required.

Qualifications:

• Successful candidates will have experience with many of the following: Security Operations Center (SOC) environments; SIEM platforms; Endpoint Detection and Response (EDR); Microsoft 365 security technologies; Windows and Linux administration; Identity and access management; Network protocols and network security; Incident response; Threat hunting; Digital forensics; Vulnerability management; Security monitoring and log analysis; Risk management; Scripting or automation (PowerShell, Python, or similar); Technical writing and incident documentation
• While not required, certifications such as the following are highly desirable: GIAC (GCIH, GCIA, GCFA, GCFE, GREM); CISSP; Security+; CySA+; CEH; Microsoft Security certifications; Splunk, Sentinel, or similar SIEM certifications

Where You Will Work:

Tallahassee, FL

Florida Department of Health Mission, Vision, and Values:

Mission:

To protect, promote & improve the health of all people in Florida through integrated state, county & community efforts.

Vision:

To be the Healthiest State in the Nation.

Values:

I nnovation: We search for creative solutions and manage resources wisely.

C ollaboration: We use teamwork to achieve common goals & solve problems.

A ccountability: We perform with integrity & respect.

R esponsiveness: We achieve our mission by serving our customers & engaging our partners.

E xcellence: We promote quality outcomes through learning & continuous performance improvement.

The Benefits of Working for the State of Florida:

Working for the State of Florida is more than a paycheck. The State's total compensation package for employees features a highly competitive set of employee benefits including:

• Annual and Sick Leave benefits;
• Nine paid holidays and one Personal Holiday each year;
• State Group Insurance coverage options, including health, life, dental, vision, and other supplemental insurance options;
• Retirement plan options, including employer contributions (For more information, please click

• Flexible Spending Accounts;
• Tuition waivers;
• And more!

For a more complete list of benefits, including monthly costs, visit

Please be advised:

Your responses to qualifying questions for this position must be verifiable by documentation provided through the electronic application process.


This position requires a security background check and/or drug screening and participation in direct deposit. Any misrepresentations or omissions will disqualify you from employment consideration. Note: You will be required to provide your Social Security Number (SSN) in order to conduct this background check Successful completion of a drug test is a condition of employment for safety-sensitive positions.

Male applicants born on or after October 1, 1962, will not be eligible for hire or promotion unless they are registered with the Selective Services System (SSS) before their 26th birthday, or have a Letter of Registration Exemption from the SSS. For more information, please visit the SSS website:


If you are a retiree of the Florida Retirement System (FRS), please check with the FRS on how your current benefits will be affected if you are re-employed with the State of Florida. Your current retirement benefits may be canceled, suspended or deemed ineligible depending upon the date of your retirement.


The successful candidate will be required to complete the Form I-9 and that information will be verified using the E-Verify system. E-Verify is operated by the Department of Homeland Security in partnership with the Social Security Administration to verify employment eligibility.


Incumbents may be required to perform emergency duty before, during, and/or beyond normal work hours or days.

All Florida Department of Health positions require the incumbent to be able to learn and communicate effectively, orally and in writing, in English. Applicants who do not meet this requirement will not be considered.


The State of Florida is an Equal Opportunity Employer/Affirmative Action Employer and does not tolerate discrimination or violence in the workplace.


Applicants requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center View phone number on click.appcast.io). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.


The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.


Florida has the third largest population of veterans in the nation with more than 1.5 million service men and women. The Florida Department of Health (department) is committed to serving members of the United States Armed Forces, veterans and their families by encouraging them to apply for vacancies that fit their area of knowledge and/or expertise. Through the Department's VALOR program, which expedites licensing for military veterans, the Department also waives initial licensing and application fees for military veterans who apply for a health care professional license within 60 months of an honorable discharge. These initiatives help ensure that the transition from military service into the workforce is as smooth as possible and reflects our appreciation for the dedication devoted to protecting our country.


Candidates requiring a reasonable accommodation, as defined by the Americans with Disabilities Act, must notify the agency hiring authority and/or People First Service Center View phone number on click.appcast.io). Notification to the hiring authority must be made in advance to allow sufficient time to provide the accommodation.

The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

VETERANS' PREFERENCE. Pursuant to Chapter 295, Florida Statutes, candidates eligible for Veterans' Preference will receive preference in employment for Career Service vacancies and are encouraged to apply. Certain service members may be eligible to receive waivers for postsecondary educational requirements. Candidates claiming Veterans' Preference must attach supporting documentation with each submission that includes character of service (for example, DD Form 214 Member Copy #4) along with any other documentation as required by Rule 55A-7, Florida Administrative Code. Veterans' Preference documentation requirements are available by clicking here. All documentation is due by the close of the vacancy announcement.


Location: