Information Security Analyst

𝐓𝐢𝐭𝐥𝐞: 𝐈𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐧𝐚𝐥𝐲𝐬𝐭 𝐋𝐨𝐜𝐚𝐭𝐢𝐨𝐧: 𝐃𝐨𝐯𝐞𝐫, 𝐃𝐄 (𝐎𝐧𝐬𝐢𝐭𝐞) 𝐃𝐮𝐫𝐚𝐭𝐢𝐨𝐧: 𝐋𝐨𝐧𝐠 𝐭𝐞𝐫𝐦 𝐈𝐧𝐭𝐞𝐫𝐯𝐢𝐞𝐰 – 𝐖𝐞𝐛𝐜𝐚𝐦 𝐒𝐞𝐧𝐢𝐨𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫 : This role requires a highly skilled and experienced cloud security professional with a deep understanding of securing cloud workloads, tools and services. A strong preference would be given to candidates with prior Zero Trust Network. Access (ZTNA) principles and a proven track record of implementing and managing secure cloud environments across multiple platforms. The ideal candidate will possess a strong combination of technical expertise and operational leadership. A candidate that brings strong experience in GCP cloud services to the state’s multi-cloud program would be desired. 𝐈. 𝐂𝐨𝐫𝐞 𝐓𝐞𝐜𝐡𝐧𝐢𝐜𝐚𝐥 𝐒𝐤𝐢𝐥𝐥𝐬 & 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞: - 𝐙𝐞𝐫𝐨 𝐓𝐫𝐮𝐬𝐭 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐀𝐜𝐜𝐞𝐬𝐬 (𝐙𝐓𝐍𝐀): The candidate must have extensive experience in ZTNA engineering and automation, ensuring secure, scalable, and policy-driven access control. This includes architecting and approving ZTNA configurations, implementing identity-aware segmentation, enforcing least privilege access policies, and leading the transition from traditional VPNs to ZTNA solutions. A deep understanding of NIST 800-207 and Zero Trust Architecture best practices is essential, along with hands-on experience with ZTNA technologies, particularly Zscaler. - 𝐂𝐥𝐨𝐮𝐝 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦 𝐄𝐱𝐩𝐞𝐫𝐭𝐢𝐬𝐞 : The candidate must demonstrate a comprehensive understanding of cloud security platforms and Infrastructure As A service (IAAS) solution providers like Google, Amazon and Microsoft. This includes in-depth knowledge of each provider's security services (e.g., IAM, security centers, firewalls, key management, logging, and monitoring tools), as well as the ability to design and implement secure cloud architectures. The candidate should be well-versed in cloud-native security controls, security posture management (CSPM) tools, and best practices for ensuring compliance with relevant security frameworks (NIST, ISO, SOC 2). - 𝐈𝐝𝐞𝐧𝐭𝐢𝐭𝐲 𝐚𝐧𝐝 𝐀𝐜𝐜𝐞𝐬𝐬 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 (𝐈𝐀𝐌) : Working knowledge of IAM concepts and best practices is crucial, with specific experience in Okta preferred. The candidate should be proficient in implementing least privilege access controls, federation, single sign-on (SSO), and other IAM solutions across multiple cloud platforms. - 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐮𝐭𝐨𝐦𝐚𝐭𝐢𝐨𝐧 𝐚𝐧𝐝 𝐎𝐫𝐜𝐡𝐞𝐬𝐭𝐫𝐚𝐭𝐢𝐨𝐧 : The candidate should possess a strong understanding of automation pipelines and experience with scripting and automation tools such as Python, Terraform, CloudFormation, and Azure Resource Manager. The ability to automate security tasks and processes, as well as experience with Security Orchestration, Automation, and Response (SOAR) platforms, is highly desirable. - 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐌𝐨𝐧𝐢𝐭𝐨𝐫𝐢𝐧𝐠 𝐚𝐧𝐝 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 : Experience with Security Information and Event Management (SIEM) logging and analysis is essential, along with an understanding of Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) concepts. The candidate must be capable of analyzing security logs and alerts, conducting threat hunting, and participating in incident response procedures and methodologies. - 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐏𝐨𝐥𝐢𝐜𝐲, 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞, 𝐚𝐧𝐝 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞 : A working knowledge of current security policies, federal and state compliance regulations, and governance standards is necessary. The candidate should be able to implement security controls to meet compliance requirements and have experience with cloud-specific compliance frameworks like FedRAMP. - 𝐃𝐚𝐭𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 : The candidate must demonstrate an understanding of data classification standards and experience with data loss prevention (DLP) configurations. - 𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 : A deep understanding of modern networking standards, including Zero Trust principles, is crucial. The candidate should have extensive experience with network security concepts and technologies, including firewall management, intrusion detection/prevention systems (IDS/IPS), network segmentation, VPNs, routing and switching protocols, network traffic analysis, and network security tools (e.g., Wireshark, tcpdump). Experience with Network Access Control (NAC), DNS security, load balancers, and web application firewalls (WAFs) is also highly desirable. - 𝐄𝐧𝐝𝐩𝐨𝐢𝐧𝐭 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 : The candidate should possess an understanding of endpoint security concepts and technologies. 𝐈𝐈. 𝐒𝐨𝐟𝐭 𝐒𝐤𝐢𝐥𝐥𝐬 & 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 : Leadership and Communication: The candidate should be able to lead and mentor junior security engineers, possess excellent communication and presentation skills, and effectively explain complex technical concepts to non-technical audiences. - 𝐏𝐫𝐨𝐛𝐥𝐞𝐦-𝐒𝐨𝐥𝐯𝐢𝐧𝐠 𝐚𝐧𝐝 𝐂𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐓𝐡𝐢𝐧𝐤𝐢𝐧𝐠: Strong analytical and problem-solving skills are vital, along with the ability to think critically and strategically, anticipate security risks, and develop effective mitigation strategies. 𝐈𝐈𝐈. 𝐄𝐝𝐮𝐜𝐚𝐭𝐢𝐨𝐧 𝐚𝐧𝐝 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧𝐬 (𝐏𝐫𝐞𝐟𝐞𝐫𝐫𝐞𝐝) : - Bachelor's or Master's degree in Computer Science, Information Security, or a related field. - Relevant certifications (e.g., CISSP, CCSP, AWS Certified Security – Specialty, Google Cloud Certified Professional. - Cloud Security Engineer, Microsoft Certified: Azure Security Engineer Associate). 𝐈𝐕. 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 𝐋𝐞𝐯𝐞𝐥 : - Minimum of 7-10 years of experience in information security, with a focus on cloud security and ZTNA. - Significant experience with GCP, AWS, and/or Azure. - Demonstrated experience in implementing and managing ZTNA solutions. 𝐑𝐞𝐪𝐮𝐢𝐫𝐞𝐝 𝐒𝐤𝐢𝐥𝐥𝐬: - The candidate must have extensive experience in ZTNA engineering and automation, Experience with Security Information and Event Management (SIEM). - The candidate must demonstrate an understanding of data classification standards and experience with data loss prevention (DLP) configurations. - The candidate should possess an understanding of endpoint security concepts and technologies. - Strong analytical and problem-solving skills are vital, along with the ability to think critically and strategically, anticipate security risks, and develop effective mitigation strategies.