Security Analyst

The Office of Cybersecurity is tasked with securing the Agency cloud infrastructure and performing ongoing enterprise cybersecurity threat monitoring and incident response capabilities. A strong candidate for this position should possess experience in the following by priority:
1. Cyber Threat Response and Incident Handling
2. Cloud platforms such as Amazon Web Services (AWS)
3. Cloud Security
4. Security Architect and/or Engineering
5. Azure Google Cloud Platform (GCP)

DAILY DUTIES / RESPONSIBILITIES:
The Cloud CyberSecurity Specialist will help Applications Team build and manage a Secure Cloud Infrastructure by adhering to Agency policy and industry best practices.
This position will report directly to the Security Operations Manager to drive innovation and maturation of the Agency Cyber threat detection and response capabilities. We are looking for candidates who are highly organized can work independently in a fastpaced environment and produce multiple quality deliverables within defined deadlines. This role is involved in projects or issues of high complexity that requires an individual who can quickly think on their feet challenge the status quo and drive efficiencies through the process.

Essential Responsibilities
1. Perform threat identification and analysis of risks to the Medicaid Cloud Based Systems
2. Provide input and feedback on cloud/hybrid architectures related to Security
3. Assist in the implementation and advancement of Continuous Monitoring and Incident Response processes and procedures
4. Perform regular security audits of resources deployed in the Medicaid Cloud Based Systems
5. Assist in investigation and remediation of security incidents and issues
6. Serve as Security Subject Matter Expert for Secure Cloud Infrastructure
7. Consult on and provide requirements for critical projects and initiatives
8. Create documentation on specific remediation steps to close vulnerabilities or mitigate risk to acceptable levels
9. Create documentation that can readily to be added to Agency procedures
10. Revise documents and artifacts as tactics and techniques evolve to address new and emergent threats and trends
11. Work with Information Technology Application Development and Business Teams to advance security efforts of the Medicaid Enterprise
12. Raise the awareness level of cloud security in the agency
13. Conducts security assessments to identify areas of risk and ensure gaps are remediated
14. Effectively communicates to management and business stakeholders the status of projects and issues as they relate to Cloud Security

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. 10 years of experience of I.T. working with Windows Linux Cloud technologies and Webbased applications
2. 24 years of experience with Cloud Security monitoring and incident response
3. A firm understanding of the offerings and capabilities within Amazon Web Services (AWS) and/or GCP and Microsoft Azure platforms
4. Ability to communicate clearly verbally and in writing; to interact effectively with internal and external vendors project team members management and agency departments; to build relationships and use facilitation skills with both technical and nontechnical personnel
5. Ability to write edit and prepare graphic presentations of technical information for both technical and business personnel
6. Ability to collaborate and coordinate with multiple teams and vendors
7. Ability to work independently and as a member of a team
8. Ability to multitask and prioritize tasks effectively in order to meet deadlines
9. Keen attention to detail while maintaining the ability to see the big picture
10. Ability to absorb and retain complex processes
11. Experience with the evaluation and selection of products and vendors to support initiatives.
12. Ability to accept changes and constructive criticism in a fast turnaround environment

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
1. 3 years of experience with Cloud platforms such Amazon Web Services (AWS) Azure Google Cloud Platform (GCP)
2. Prior experience working with cloud security and governance tools cloud access security brokers (CASBs) and infrastructure as a code
3. Experience with deployment orchestration automation and security configuration management of AWS native tools
4. Experience with fullstack deployment

REQUIRED EDUCATION/CERTIFICATIONS:
ANY ONE OR COMBINATION OF:
CLOUD CERTIFICATION (I.E CCSP)
GIAC CERTIFIED INCIDENT HANDLER (GCIH)
SECURITY
OR SIMILAR WITH VALID EXPERIENCE

PREFERRED EDUCATION/CERTIFICATIONS:
BS degree in computer science information technology engineering or similar discipline
Network security certifications
Additional Sills: REQUIRED EDUCATION/CERTIFICATIONS: ANY ONE OR COMBINATION OF: GIAC CERTIFIED INCIDENT HANDLER (GCIH) CLOUD CERTIFICATION (I.E CCSP) SECURITY OR SIMILAR WITH VALID EXPERIENCE Skills: Administrative Verbal Communication Skills Yes 2 Expert Currently Using 6 Years Administrative Written Communication Skills Yes 2 Expert Currently Using 6 Years Cloud cloud platforms / environments Yes 1 Advanced Within 1 Year 1 2 Years Education Technical Certifications Yes 1 Advanced Currently Using 1 2 Years Education Bachelor of Science Degree No 1 Advanced Currently Using 2 4 Years Miscellaneous Configuration management No 1 Advanced Within 1 Year 1 2 Years Network Security IT Security Yes 1 Advanced Within 6 Months 2 4 Years Networking & Directories Experience with UNIX Windows Linux MacOS Cisco Juniper web apps databases strong authentication operating systems and network security protocols and procedures. Yes 1 Operating Systems/APIs Linux Yes 1 Advanced Within 6 Months 6 Years Operating Systems/APIs Windows Yes 1 Advanced Within 6 Months 6 Years Specialties Experience in system analysis and information technology Yes 1 Expert Currently Using 6 Years Specialties Azure Cloud and Virtualization No 1 Advanced Within 6 Months 2 4 Years