Security Analyst

This is an ongoing project with aggressive timelines. A majority of the team is

made up of experienced professionals, and we are seeking individuals who are

highly productive, flexible, and comfortable working in an environment where

priorities can shift. Team members are expected to contribute with minimal

supervision.

Candidates who enjoy complex, change-driven projects and collaborating with

motivated colleagues will find this position appealing.

WHY IS THIS POSITION OPEN (new role, increased workload, new dept, resignation,

promotion)?

NEW ROLE

SCOPE OF THE PROJECT:

The Office of Cybersecurity ensures the confidentiality, integrity and availability

of SCDHH’s systems and services. Strong candidate must have hands-on

experience with:

• Data network design best practices
• Routing and switching protocols
• Network security best practices
• On-premise and/or cloud networking environments

•

• This role requires someone who can contribute independently on technical tasks

and support more senior analysts on complex initiatives.

POSITION TITLE: JUNIOR NETWORK SECURITY ANALYST

PRE-EMPLOYMENT CHECKS (drug, credit, criminal, motor vehicle)?

Criminal, drug, credit, motor vehicle

DAILY DUTIES / RESPONSIBILITIES:

This is a hands-on technical role reporting to the Office of Cybersecurity SOC

lead.

The analyst will support SCDHHS leadership, business units, partners, and

vendors in day-to-day cybersecurity operations.

Security Program Experience:

Strongly desired experience includes:

• CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworks
• Performing repeatable security processes supporting compliant enterprise

architectures

• Supporting security considerations for multi-tenant cloud environments

and vendor integrations

Technical Experience:

Candidates should have hands-on experience with:

1. Secure network design principles
2. Windows, macOS, and Linux operating systems
3. Switching and Routing
4. Enterprise Firewalls
5. Network auditing
6. IDS/IPS platforms
7. Network security monitoring
8. SIEM platforms such as QRadar, Splunk (Preferred)
9. Vulnerability scanning tools (Nessus, Qualys, etc.)
10. Cloud Infrastructure Security (Preferred)

Essential Responsibilities:

1. Assist in maturing network security and compliance solutions
2. Investigate and respond to daily network alerts
3. Perform network security assessments for proposed firewall and infrastructure

changes

1. Conduct technical analysis for network security planning and engineering
2. Review and assessment of connectivity, website block and firewall rule requests

to ensure they do not present an elevated risk to the agency

1. Analyze on-premise and cloud networks for potential threats
2. Develop, review, and analyze network traffic reports that violate the agency’s

approved standards governing Ports, Protocols and Services.

1. Monitor emerging threat vectors and recommend countermeasures
2. Collaborate with other areas of the agency to implement security controls
3. Support cloud and on-premise network changes and enhancement projects
4. Ensure compliance with ARC-AMPE, HIPAA and SCDIS-200
5. Assist with KPI creation and trend report monitoring
6. Participate in firewall configuration reviews and ruleset recertification
7. Provide guidance on best practices to technical teams
8. Perform additional SOC duties as assigned

REQUIRED SKILLS (RANK IN ORDER OF

IMPORTANCE):

1. Approximately 3-5 years of

hands-on experience in network

design, implementation, or

support

2. Hand-on experience in IT security

or system administration

3. Working knowledge of secure

PREFERRED SKILLS (RANK IN ORDER OF

IMPORTANCE):

1. Experience working in regulatory

environments

2. Experience supporting health IT or

state government.

3. Familiarity with FISMA, NIST,

CMS ARC-AMPE, and HIPAA

security and privacy standards

4. Cloud network security controls

network design, security

architecture, compliance tools, data

protection, and access models

4. Ability to analyze logs, alerts, and

network telemetry.

5. Proficiency with Microsoft Office

tools

(Azure or AWS).

REQUIRED EDUCATION/CERTIFICATIONS:

1. BS degree in Computer Science,

information systems,

Cybersecurity, or related field;

or equivalent experience

2. A network security centric

certification such as PCNSE or

CCNA

PREFERRED EDUCATION/CERTIFICATIONS:

1. CISSP or Security+

Requirements

Required Skills

Skill Type

Skill Name

CertificationEducationLicenseOtherSkill BS degree in Computer Science, information systems, Cybersecurity, or related field; or 5+ years equivalent experience

CertificationEducationLicenseOtherSkill A network security centric certification such as PCNSE or CCNA

CertificationEducationLicenseOtherSkill 3-5 years of hands-on experience in network design, implementation, or support

CertificationEducationLicenseOtherSkill Experience in IT security or system administration

CertificationEducationLicenseOtherSkill Working knowledge of secure network design, security architecture, compliance tools, data protection, and access models

CertificationEducationLicenseOtherSkill Ability to analyze logs, alerts, and network telemetry.

CertificationEducationLicenseOtherSkill Proficiency with Microsoft Office tools

Preferred Skills

Skill Type

Skill Name

CertificationEducationLicenseOtherSkill CISSP or Security+

CertificationEducationLicenseOtherSkill Experience working in regulatory environments

CertificationEducationLicenseOtherSkill Experience supporting health IT or state government.

CertificationEducationLicenseOtherSkill Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standards

CertificationEducationLicenseOtherSkill Cloud network security controls (Azure or AWS).