Cyber Security Analyst

Weber County

About the Role

Implement, monitor, and maintain Weber County's enterprise-wide Information Technology (IT) security programs designed to protect the confidentiality, integrity, and availability of all County systems and resources. Support the Information Security Officer with day-to-day security tasks.

Key Responsibilities

• Perform hands-on virus/malware identification, investigation, and mitigation on county endpoints.
• Act in an advisory role to other teams within IT and throughout the county.
• Stay current with technical knowledge in information systems, security and privacy technologies, best practices, and the use of appropriate security controls and methods.
• Deploy Information Security plans and short-term and long-term strategies for the IT organization and the County, as instructed.
• Deploy and integrate IT security and privacy-related programs designed to protect the County's systems, applications, and data.
• Identify and communicate security issues and their impact on the IT organization and the County, assisting with executing successful solutions and tracking measurable results.
• Comply with and promote all IT security policies, processes, procedures, and best practices.
• Establish and maintain positive business relationships with users countywide to market and educate them on the importance of security cooperation and compliance.
• Design, develop, implement, and monitor information security systems and controls.
• Document processes and monitor systems that report on the effectiveness of systems and controls necessary to protect the County's information technology systems, assets, and interests.
• Monitor compliance with the organization's information security policies and procedures among employees, contractors, partners, and other third parties, and resolve potential issues as needed.
• Assist with information security risk assessments and serve as an information security subject matter expert to countywide customers.
• Respond, as directed, to information security incidents and follow up to ensure proper protection and corrective measures have been taken.
• Participate, as instructed, in forensics investigations and audits as required.
• Implement, as instructed, security controls for systems that accept payment card data.
• Implement, as instructed, the County's cloud security strategy to protect County IT systems and data in PaaS, SaaS, and IaaS environments.
• Embrace managed security service options as they are considered.
• Maintain required certifications as specified by the Information Security Officer.
• Other duties as assigned.

Requirements & Tech Stack

• Enthusiasm and passion for security.
• Ability to work independently or as part of a larger security team.
• Basic understanding of IT systems, computer infrastructure & software (e.g., computer, server, storage, networking, firewall, OS, databases, web servers, virtualization).
• General understanding of how to reverse engineer attacks.
• Introductory level knowledge of Information Security or Information technology standards.
• Introductory knowledge of Linux, Windows and Network system administration practices, access control, and auditing/logging procedures within an enterprise-class environment.
• Introductory knowledge of security related tools including vulnerability assessment tools, Host Based Security Systems, log aggregation and SIEMs, File Integrity Monitoring Software.
• Communications skills, both verbal and written, with the ability to communicate well with people in a variety of positions, roles, and levels.
• Ability to leverage networking tools to map networks on a basic level.
• Ability to create and maintain effective documentation, including policies, processes, and procedures.
• Ability to prioritize workload to meet commitments.
• Basic networking skills (IP Addressing, subnets, simple network tools).
• Ability to multitask and prioritize projects, appropriately manage expectations, make difficult judgment calls, and communicate complex issues in an easy-to-understand format.
• Ability to prepare multiple types of documentation, policies, guides, communications, presentations, etc.
• Initiative-driven attitude and willingness to take on challenging tasks independently.
• Professional, self-motivated, and a strong sense of urgency.

Qualifications

Education

• Bachelor's Degree from an accredited college or university in Information Technology/Security or a closely related field.

OR

• Technical College certificate in Security/IT with additional technical certifications (Security+, Network+, etc.) plus six (6) months to two (2) years related experience.

OR

• An equivalent combination of education and five (5) years of related experience.

This position requires regular onsite presence.

Relocation assistance is not available.

Work Authorization & Residency: Applicants must be legally authorized to work in the United States without employer sponsorship on a permanent basis.

Due to the nature of this position, the successful candidate may be required to complete a pre-employment background check.