140719

Job Title: Cyber Security CIP IT Security Analyst 3

Location: DimondaleMIHybrid(Candidate Must be Local and onsite twice a week)

Duration: 12 Months

Job overview:

The Senior Security Analyst position works as a member of the Incident Response Team. This position reviews and remediates cyber incidents alerts and vulnerabilities in the State of Michigan (SOM) environment and maintains the confidentiality integrity and availability of SOM data.

The Senior Security Analyst completes mid to highlevel cyber investigations involving the security of the SOM network.

MustHave:

1. Reviews validates and documents security procedures standard operating procedures for undocumented incidents and lessons learned.

2. Reviews security incidents for actual or potential breaches or noncompliance and ensures that all identified events are promptly and thoroughly investigated as needed.

3. Reviews metrics on the performance of security responsibilities controls and design. Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis.

4. Serves as an Incident response specialist for cyber event detection correlation response and recovery.

5. Operates Incident Response tools and determines configuration for tools that are used to collect and analyze data to meet program reporting and evaluation requirements. Incident data includes incident tickets serviced requests sent through to the IR team IR actions and the results of IR investigations.

6. Coordinates security responses and rootcause for all cyber security related events for the State of Michigan.

7. Analyzes / Provides recommendations to management and executives on trending threats and how security can be improved on a Statewide basis as well as provide routine updates to management on the progress and status of active events.

8. Interfaces with other agencies to assist and make recommendations on how to improve the security posture and reduce the number of security related events.

9. May be part of an oncall rotation with potential for weekend/afterhours work.

10.Escalates as necessary.

11.Other duties as assigned.

5 years of information security experience.

Experience with Malware analysis digital forensics data/network analysis and penetration testing.

Experience with Incident Response tools.