State of Wisconsin · 2 days ago

Security Analyst II

Wisconsin, United States

Contract

Onsite

Mid Level

Wonder how qualified you are to the job?

Maximize your interview chances

AssociationNon Profit

Hiring Manager

Kapileshwara Sharma

Insider Connection @State of Wisconsin

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Provide guidance and technical assistance to system administrators in securing the systems and networks under DNR IT areas of responsibility.

Ensure and assess the entire DNR network is continually monitored for security vulnerabilities and compromises.

Conduct security self-assessments (e.g., Penetration Testing) to evaluate the processes, procedures, and tools used to review, assess, and test information systems controls and security across DNR managed systems.

Report security status, vulnerabilities, and issues to management

Work with the Department of Administration Division of Enterprise Technology pre- and post-implementation audits of new systems to ensure secure integration.

Periodic review and analysis of system Integrity, data integrity, and data flows

Assurance of quality and consistency of all DNR information technology-related activities including standards, policies, and procedures

Audit access rights and ensure alignment to policies.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Directory ServicesActive DirectoryModern AuthenticationAuthorizationAccountingRole-based access controlsAttribute-based access controlsSecurity informationEvent managementSIEMIdentity access systemsIAMNetwork access controlNational Vulnerability DatabaseNVDCommon Vulnerability DatabaseCVECommon WeaknessesEnumerationCommon Attack Pattern EnumerationClassification DatabaseCAPECTransactANSI Structure Query LanguageSQLNIST Risk ManagementRMFCybersecurity FrameworkCSFZScaler Administration

Required

Strong understanding of Directory Services including Active Directory.

Strong understanding of Modern Authentication, Authorization, and Accounting including Role-based and attribute-based access controls RBAC and ABAC.

Strong understanding of Security information and event management (SIEM) methods and tools.

Understanding of Identity access systems (IAM) and network access control (NAC).

Understand the purpose and structure of the National Vulnerability Database (NVD), Common Vulnerability Database (CVE), Common Weaknesses and Enumeration (CWE) and Common Attack Pattern Enumeration and Classification Database (CAPEC)

Basic understanding of Transact and ANSI Structure Query Language (SQL)

Knowledge of NIST Risk Management (RMF) and Cybersecurity Framework (CSF)

ZScaler Administration

Incident Response Life Cycle

Cyber Security Risk Management Principles