IT Security Analyst Senior/Lead

Posting Date

Application Deadline

Pay Range

Job Type

Department

About the Position

We are seeking a highly skilled and experienced IT Security Analyst Senior/Lead to join our IT Team. The IT Security Analyst Senior/Lead is responsible for identifying process risks, weaknesses, and controls and making recommendations and plans to address vulnerabilities. This position is also responsible for identifying compliance deficiencies and incidents, documenting the findings, monitoring the remediation, and ensuring their successful closure to increase security and compliance. The IT Security Analyst Senior/Lead will research, design, develop, and implement security and protection measures and monitor systems for potential threats. In this role, you will manage software that protects from online vulnerabilities and document breaches and report issues so they can be adequately handled. The ideal candidate will play a crucial role in ensuring the security of our IT systems and data within our area of responsibility, focusing on implementing and maintaining security measures, conducting risk assessments, and responding to security incidents.

About Us

Join a team on a mission to provide fair and equitable access to justice. Our department is looking for people who strive to provide excellent customer service, collaborate in a team atmosphere, and serve the community by actively learning through experiences, using both successes and failures as opportunities to learn and grow. Every team member plays a vital role inproviding services for the justice system, the legal community, and the general public.

Proud to Offer

• Work with a greater purpose

• Tuition reimbursement

• Exceptional work-life balance

• Opportunities for growth and development within Maricopa County

• Low-cost, high-value healthcare for you and your qualifying dependents

• Paid vacation, sick time, and parental leave

• Extensive wellness program, including healthcare premium discounts

• Employee discounts for goods and services

• Maricopa County participates in the Arizona State Retirement System. This defined retirement benefit requires a 12. 27% monthly contribution rate and includes a 100% employer match on Day 1

• Learn more at Work With Us | Maricopa County, AZ

We Require

• Five years of experience in IT security and compliance or a related field

• Bachelor's degree in Computer Science or a related field

• A combination of post-secondary education and/or job-related experience may substitute for the minimum qualifications on a year-for-year basis

We Also Value

• In-depth understanding of security technologies and concepts, including firewalls, proxies, Security Information and Event Management (SIEM) systems, Intrusion Detection and Prevention Systems (IDPS), and endpoint protection solutions

• Strong ability to identify, assess, and prioritize network and system vulnerabilities, coupled with expertise in recommending appropriate mitigation strategies

• Familiarity with penetration testing methodologies and common hacking techniques to better understand and anticipate potential threats

• Proficiency in security architectures and protocols, including authentication and access control technologies, encryption and key management, network traffic analysis, and Web Application Firewalls.

• Experience with incident handling procedures and forensic analysis techniques

• Knowledge of cloud security principles and best practices

• Familiarity with DevSecOps practices and tools for integrating security into the development lifecycle

• Strong analytical skills with the ability to translate technical findings into actionable recommendations for both technical and non-technical stakeholders

Job Contributions

• Oversee the monitoring, investigating, and reporting of security-related events

• Review changes to information systems to ensure compliance with security standards, policies, and procedures

• The principle point of contact to provide technical expertise to DTI staff regarding security risks, controls, and safety recommendations

• Conduct regular security assessments and analysis of systems on a periodic basis

• Lead the planning, development, and execution of tabletop exercises to evaluate and enhance the organization's incident response capabilities

• Sole contact with implementing and evaluating organizational compliance with County IT Information Security policies, standards, procedures, and guidelines

• Promote and monitor end-user adherence to IT policies, standards, and best practices

• Maintain up-to-date documentation of security-related systems, controls, and processes, including security architecture diagrams

• Identify vulnerabilities in internal and external systems and applications, recommend mitigation strategies, and track their resolution

• Assist in the creation, review, and maintenance of IT security policies and procedures to ensure alignment with industry standards and organizational requirements

• Serve as a primary point of contact for all DTI employee IT security-related inquiries, concerns, and incidents

• Perform security evaluations of new applications and programs prior to installation or upgrades

• Develop, validate, and maintain incident response plans and processes to address potential threats

• Review vulnerability scans, identify necessary actions, and coordinate with appropriate teams for timely resolution

• Evaluate, recommend, and oversee the use of various security tools and solutions to protect IT assets

• Collaborate with other IT teams to ensure cohesive security measures across the organization

• Provide security awareness training to staff and develop educational materials on best practices

• Stay informed about emerging threats and security trends, recommending and implementing new security measures as needed

• Ensure compliance with relevant industry standards and regulations

Working Conditions

• Mostly in an office setting in a high-volume, fast-paced environment. Requires extended periods of sitting while completing computer activities

Selection Procedure

• Only the most qualified candidates will be considered

• Consideration will only be given to candidates who submit online applications

• Candidates will be contacted primarily through email and their Workday online application profile

  <.