My IT LLC · 2 days ago

Security Analyst II

Madison, WI

Full-time

Hybrid

Mid, Senior Level

5+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

IT Services and IT Consulting

Growth Opportunities

Insider Connection @My IT LLC

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Provide guidance and technical assistance to system administrators in securing the systems and networks under DNR IT areas of responsibility.

Ensure and assess the entire DNR network is continually monitored for security vulnerabilities and compromises.

Conduct security self-assessments (e.g., Penetration Testing) to evaluate the processes, procedures, and tools used to review, assess, and test information systems controls and security across DNR managed systems.

Report security status, vulnerabilities, and issues to management.

Work with the Department of Administration Division of Enterprise Technology pre- and post-implementation audits of new systems to ensure secure integration.

Periodic review and analysis of system Integrity, data integrity, and data flows

Assurance of quality and consistency of all DNR information technology-related activities including standards, policies, and procedures

Audit access rights and ensure alignment to policies.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Modern AuthenticationAuthorizationAccountingRole-based access controlsAttribute-based access controlsSecurity informationEvent managementSIEM methodsNational Vulnerability DatabaseNVDCommon Vulnerability DatabaseCVECommon WeaknessesEnumerationCWECommon Attack Pattern EnumerationClassification DatabaseCAPECDirectory ServicesActive DirectoryIdentity access systemsIAMNetwork access controlTransactANSI Structure Query LanguageSQLNIST Risk ManagementRMFCyber security FrameworkCSF

Required

Strong understanding of Modern Authentication, Authorization, and Accounting including Role-based and attribute-based access controls RBAC and ABAC. (5+ years)

Strong understanding of Security information and event management (SIEM) methods and tools. (5+ years)

Understand the purpose and structure of the National Vulnerability Database (NVD), Common Vulnerability Database (CVE), Common Weaknesses and Enumeration (CWE) and Common Attack Pattern Enumeration and Classification Database (CAPEC) (5+ years)

Strong understanding of Directory Services including Active Directory.

Understanding of Identity access systems (IAM) and network access control (NAC).

Basic understanding of Transact and ANSI Structure Query Language (SQL)

Knowledge of NIST Risk Management (RMF) and Cyber security Framework (CSF)

Zscaler Administration

Incident Response Life Cycle

Cyber Security Risk Management Principles