It Professional - Information Security

Information Technology (IT) Professionals analyze, develop, implement, maintain, and modify computer operations, systems, networks, databases, applications, and/or information security. Incumbents may perform duties in one or more IT specialization areas depending on the needs of the agency. Bachelor's degree from an accredited college or university in computer science, management information systems, or closely related field and three years of professional IT experience relevant to the duties of the position which may include computer operations, systems administration, network administration, database administration, applications analysis and development, and/or information security, one year of which was at the journey level;

OR one year of relevant experience as an IT Professional II in Nevada State service; OR an equivalent combination of education and experience as described above.

This is a non-supervisory position located in Carson City or Las Vegas areas within the Governors Technology Office, Office of Information Security and Cyber Defense. The incumbent serves as the Cyber Threat Intelligence Analyst and collects, analyzes, and interprets data on cyber threats (like malware, hacking groups, and attacker tactics) to provide actionable insights that help an organization proactively defend against attacks, protect assets, and make informed security decisions, essentially acting as a "digital weather forecaster" for cyber risks.

They look at the "who, what, why, and how" of cyber threats to identify patterns, vulnerabilities, and potential future attacks, turning raw data into strategic warnings and defensive measures.

This position will also play a lead role in authoring bi-weekly intelligence products to be shared with partner agencies and communities of interest. Additionally, the incumbent will play a lead role in authoring the State's cybersecurity strategy. The incumbent will demonstrate the knowledge and ability to apply the Intelligence Cycle to plan, collect, process, analyze, and disseminate information and intelligence. This position will produce intelligence reports that provide key findings, likelihoods, and detailed analysis on threats to public safety in Nevada or Nationwide.

Incumbents must be capable of disseminating exigent information or public safety in the forms of bulletins, known cyber compromise alerts, and tactical products provided to partner organizations with a valid need to know. Incumbents will be required to research products that show new and emerging tactics, techniques, and procedures along with assisting partner organizations in the defense of their networks and hardware/software.

Incumbents are responsible for working directly with federal partners, like the FBI and CISA, to ensure Nevada state entities receive the appropriate resources and assistance when dealing with a cyber incident.

This position will also monitor CISA's 'Known Exploited Vulnerabilities Catalog' and sharing pertinent information and threats with partner organizations in the State and participate in and contribute to monthly threat briefings for state, local and federal executives. This includes the Governor’s office, the Secretary of State’s office, executive leadership for the Nevada State Police, the Department of Homeland Security, Federal Bureau of Investigation, and other cleared federal, state, and local stakeholders.

Incumbent(s) will be expected to have knowledge, skills and abilities from a previous level.

• Working knowledge of: three of the ten security domains; current principles, theories, practices, and procedures of information security management.
• General knowledge of: general-purpose security controls; current information security trends and technologies.
• Ability to: develop plans to safeguard against accidental or unauthorized modification, destruction or disclosure of data to meet security needs; assess costs and present alternatives for the assigned area of responsibility; participate in long-term projects and strategic planning; organize resources and materials in order to meet project timelines; assess the security and/or vulnerability of information assets to assist in developing a risk assessment;
  
  analyze data, solve problems and make appropriate decisions within three of the ten domains; provide effective and responsive customer service; establish and maintain positive working relationships with others; develop and implement information security training materials and workshops.
• Skill in: technical writing, report preparation and oral communication.

Jon Terrazas at j.terrazas.gov