Security Analyst (Incumbent)

INTERVIEW= Onsite / Virtual
JOB TYPE= Onsite

Scope of Work/Job Characteristics
The Advanced Information Security Analyst will serve as the principal line of communication for the
project team. The duties and responsibilities of this position are as follows:
" Leading the technical implementation of security projects, focusing on system hardening, network security, and identity management while collaborating with teams to meet law enforcement-specific security standards;
" Hands-on expertise in firewalls, Intrusion Detection Systems, Intrusion Prevention Systems (IDS/IPS), encryption, and secure Microsoft configurations, along with conducting vulnerability assessments and developing remediation strategies;
" Manage security tools, support threat detection and incident response, and ensure integration of
" security platforms;
" Compliance with Criminal Justice Information Services (CJIS) and state regulations is critical, as is working with Governance, Risk, and Compliance (GRC) teams to ensure adherence and address audit gaps;
" Documentation and training on cybersecurity solutions and processes are required, with a focus on CJIS and state regulations; and
" Demands reengineering security processes for efficiency and compliance, providing support for
cybersecurity issues, and staying informed on emerging threats and technologies.

Required Qualifications
A bachelor's or master's degree from an accredited college or university in Computer Science, Information Systems, or other related field, or four (4) years of equivalent work experience is required. Relevant experience may be substituted for education on a year-for-year basis when applicable.
The Department requires the following experience, skills, and knowledge for this position:
" A minimum of five (5) years or more of server or network administration experience;
" A minimum of three (3) years or more of information security administration experience in an enterprise environment with 1,000 or more users;
" A minimum of two (2) years or more experience managing technical implementations;
" A minimum of three (3) years or more of SIEM experience;
" A minimum of three (3) years or more of vulnerability management experience;
" Knowledge of security issues, techniques, and implications across all existing computer platforms;
" Experience in designing, implementing, and optimizing security processes to enhance operational efficiency, align with compliance requirements (e.g., CJIS), and mitigate risks across IT and organizational functions;
" Proven ability to re-engineer existing security processes to improve system integrity, streamline
workflows, and ensure alignment with evolving technology and regulatory standards, particularly within Microsoft and Azure environments; and
" Experience maintaining and supporting third-party antivirus applications.

Preferred Qualifications
The Department prefers the Candidate to have the following experience, skills, and/or knowledge for this position:
" Experience working with IDS/IPS systems;
" Experience using Office 365 Data Loss Prevention (DLP);
" Preparing status reports and providing management briefings;
" Knowledge of IT standards in a criminal justice environment;
" Experience with Microsoft security technologies such as Azure Security Center, Microsoft Defender, and Active Directory; and
" Familiarity with law enforcement security standards, specifically CJIS, and other relevant State of Florida regulations.