Security Analyst

Security Analyst

The Office of Cybersecurity ensures the confidentiality integrity and availability of SCDHHs systems and services. The ideal candidate should have strong hands-on experience with data network design best practices routing and switching protocols network security best practices and on-premises and/or cloud networking environments. This role requires someone who can work independently on technical tasks while also supporting senior analysts on more complex cybersecurity and network initiatives.

• Hands-on technical role reporting directly to the Office of Cybersecurity SOC Lead.
  
• Support SCDHHS leadership business units partners and vendors with day-to-day cybersecurity operations.
  
• Experience with security and compliance frameworks such as CMS ARC-AMPE HIPAA NIST and FISMA RMF is strongly desired.
  
• Perform repeatable security processes supporting compliant enterprise architectures.
  
• Support security requirements for multi-tenant cloud environments and vendor integrations.
  
• Apply secure network design principles across enterprise environments.
  
• Hands-on experience with Windows macOS and Linux operating systems.
  
• Strong understanding of switching routing enterprise firewalls and network auditing.
  
• Experience with IDS/IPS platforms and network security monitoring.
  
• Experience with SIEM platforms preferably QRadar or Splunk.
  
• Experience with vulnerability scanning tools such as Nessus and Qualys.
  
• Cloud infrastructure security experience is preferred.
  
• Assist with improving and maturing network security and compliance solutions.
  
• Investigate analyze and respond to daily network security alerts.
  
• Perform security assessments for proposed firewall and infrastructure changes.
  
• Conduct technical analysis supporting network security planning and engineering.
  
• Review connectivity website-blocking and firewall-rule requests to identify potential security risks.
  
• Analyze on-premises and cloud networks for potential threats and vulnerabilities.
  
• Develop and review network traffic reports to identify violations involving approved ports protocols and services.
  
• Monitor emerging cyber threats and recommend appropriate countermeasures.
  
• Collaborate with agency teams to implement and maintain appropriate security controls.
  
• Support cloud and on-premises network changes enhancements and security projects.
  
• Help maintain compliance with ARC-AMPE HIPAA and SCDIS-200 requirements.
  
• Assist with security KPI development reporting and trend monitoring.
  
• Participate in firewall configuration reviews and ruleset recertification.
  
• Provide network and cybersecurity best-practice guidance to technical teams.
  
• Perform additional Security Operations Center (SOC) responsibilities as assigned.
  

Education and Certifications:

• Bachelors degree in Computer Science Information Systems Cybersecurity or a related field or equivalent professional experience.
  
• A network/security-focused certification such as PCNSE (Palo Alto Networks Certified Network Security Engineer) or CCNA (Cisco Certified Network Associate).
  

Required Skills:

• Approximately 35 years of hands-on experience in network design implementation or support.
  
• Hands-on experience in IT security or system administration.
  
• Working knowledge of secure network design and security architecture.
  
• Knowledge of security compliance tools data protection and access-control models.
  
• Ability to analyze and interpret security logs alerts and network telemetry.
  
• Proficiency with Microsoft Office tools.
  

Preferred Skills:

• Experience working in regulated environments.
  
• Experience supporting Health IT and/or state government environments.
  
• Familiarity with FISMA NIST CMS ARC-AMPE and HIPAA security and privacy standards.
  
• Experience with cloud network security controls particularly in Microsoft Azure or AWS environments
  
• CISSP or Security