IT Security Analyst - Hybrid - 90% Remote

County of Wake, NC•Raleigh, NC

9d•Hybrid

About The Position

Join Wake County as an IT Security Analyst and help keep our digital environment safe and secure! As the IT Security Analyst, you will serve as the initial point of contact for cybersecurity events, triaging potential incidents, assessing their nature and scope, and collaborating with Security Team members to coordinate effective response and remediation efforts. You will also develop and maintain technical documentation and play a key role in creating training materials that promote a solid culture of security across the organization. Candidates must have experience handling all aspects of day-to-day security operations, meticulous attention to detail, outstanding problem-solving skills, work comfortably under pressure and be able deliver on tight deadlines and in accordance with legal and regulatory requirements. Essential Functions: Monitor and triage security events daily, performing assessments, investigations and working with appropriate team members, business teams and technology teams to develop solutions that address critical security concerns Develop and maintain technical documentation for security platforms, including system security plans, policies, procedures and standards Promote a culture of security throughout the County by working closely with members of the Information Security Team and relevant operational teams to gather data and insights that enhance the organization's security awareness program Conduct information security awareness briefings, trainings and simulations in order to influence positive security behaviors across the organization Support governance, risk and compliance activities, including conducting technical assessments, application assessments, contract reviews and audits NOTE: Additional Requirements: This position is subject to 24-hour on-call rotation requirements and must be able to be onsite within 1 hour at the Raleigh, NC office. About Our Team Wake County Information Technology is in the heart of Raleigh’s booming downtown, a part of the Research Triangle area. If you’re a tech-guru, this is the place to be. Our team of smart, dedicated people is respected within our organization and recognized as leaders in the use of technology by the prestigious Center for Digital Government, regularly ranking in the top ten among counties with a population for 1 million or more. Our team members are our most valued asset and treated as such with competitive salaries and top-notch benefits. We believe a good work/life balance helps people make better decisions, be more creative and enjoy coming to work. If you thrive in a highly collaborative, fast-paced, supportive environment, then you owe it to yourself to check us out. What Makes Wake Great Home to the State Capital, Wake County is one of the fastest growing areas in the nation and the most populous county in the state, with more than 1.1 million residents. The County has received national and international rankings and accolades from publications such as Money, Fortune, and Time magazines as being one of the best places to live, work and play. The central location of the County allows for a short drive to the spectacular mountains or coast. Wake County Government is governed by a seven-member Board of Commissioners, who are elected at-large to serve two-year terms. Wake County Government has a general operating budget of $1.874 billion, employs over 4400 employees, experiences minimal turnover, and is an award-winning leader in wellness and technology initiatives; such as offering employees and covered spouses free access to the Employee Health Center. Wake County Government offers a wide range of training and development opportunities, a stable career in public service with a balance of work and family life, flexible work schedules and a competitive salary and benefits package. Equal Opportunity Statement Wake County provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. Background Check Statement Position may require a background check that may include: criminal, credit, motor vehicle, education, and sexual offender registry or others based on job requirements. Unless required by state law, a record of conviction will not automatically exclude you from consideration for employment. Wake County Government is an Equal Opportunity Employer. Emergency Service Worker Statement In the event of an emergency, as determined by the County Manager or designee, participation in preparedness and response operations should be expected. Employee may be required to fill a temporary assignment in a role different from standard duties, work hours and/or work location in preparation for, during and after the emergency. Employee may also be required to participate in relevant exercises and regular preparedness training.

Requirements

Associates degree in Computer Science, Information Systems, Computer Engineering or a related field
Three years of experience in IT security incident and event management, incident response, endpoint protection and email security
A minimum of two active security certifications from an industry recognized certification body (ISC2, CompTIA, EC-Council, etc.) may be substituted for the combined education and experience requirements
Equivalent education and experience are accepted
Please include ALL prior work experience on your application and resume.
Knowledge and understanding of information security architecture, technologies, best practices and controls
Solid organizational skills with the ability to thrive in a sense-of-urgency environment, leveraging best practices and approach challenges with a team-oriented, can-do attitude
Detail-oriented with excellent problem-solving, analytical, communication, organizational, task and time management skills
Excellent communication skills with the ability to clearly discuss and convey complex information technology security concepts to both technical and non-technical staff
Desire to maintain up-to-date knowledge of developments in security technology, trends and issues

Nice To Haves

Demonstrable experience with common security tools, such as firewalls, cloud providers, SIEM tools, IDS/IPS, endpoint protection, email security or identity providers
Familiarity with common Information Security frameworks and standards and compliance and regulations such as ISO 27001/27002, NIST, PCI-DSS, HITRUST, HIPAA and HITECH
Active security certifications, such as Security+ or CySA+ preferred
Experience documenting complex technical designs and implementation strategies
Experience identifying, analyzing, responding to and remediating security events in a timely manner
Experience designing and implementing technical education materials, as well as conducting technical training with diverse audiences
Experience utilizing enterprise security platforms, including but not limited to firewalls, intrusion detection/prevention, web filtering, vulnerability management, endpoint protection, email protection and encryption

Responsibilities

Monitor and triage security events daily, performing assessments, investigations and working with appropriate team members, business teams and technology teams to develop solutions that address critical security concerns
Develop and maintain technical documentation for security platforms, including system security plans, policies, procedures and standards
Promote a culture of security throughout the County by working closely with members of the Information Security Team and relevant operational teams to gather data and insights that enhance the organization's security awareness program
Conduct information security awareness briefings, trainings and simulations in order to influence positive security behaviors across the organization
Support governance, risk and compliance activities, including conducting technical assessments, application assessments, contract reviews and audits