IT Security Analyst - Hybrid - Remote

What You'll Be Doing

Join Wake County as an IT Security Analyst and help keep our digital environment safe and secure!

As the IT Security Analyst
, you will serve as theinitialpoint of contact for cybersecurity events, triaging potential incidents, assessing their nature and scope, and collaborating with Security Team members to coordinate effective response and remediation efforts. You will also develop andmaintaintechnical documentation and play a key role in creating training materials that promote a solid culture of security across the organization.

Candidates must have experience handling all aspects of day-to-day security operations, meticulous attention to detail, outstanding problem-solving skills, work comfortably under pressure and be able deliver on tight deadlines andin accordance withlegal and regulatory requirements.

Essential Functions:

• Monitor and triage security events daily, performing assessments, investigations and working with appropriate team members, business teams and technology teams to develop solutions that address critical security concerns
• Develop andmaintaintechnical documentation for security platforms, including system security plans, policies, procedures and standards
• Promote a culture of security throughout the County by working closely with members of the Information Security Team and relevant operational teams to gather data and insights that enhance the organization's security awareness program
• Conduct information security awareness briefings, trainings and simulationsin order to influence positive security behaviors across the organization
• Support governance, risk and compliance activities, including conducting technical assessments, application assessments, contract reviews and audits

NOTE:

Additional Requirements:

This position is subject to 24-hour on-call rotation requirements and must be able to be onsite within 1 hour at the Raleigh, NC office.

Wake County Information Technology is in the heart of Raleigh’s booming downtown, a part of the Research Triangle area. If you’re a tech-guru, this is the place to be. Our team of smart, dedicated people is respected within our organization and recognized as leaders in the use of technology by the prestigious Center for Digital Government, regularly ranking in the top ten among counties with a population for 1 million or more.

Our team members are our most valued asset and treated as such with competitive salaries and top-notch benefits. We believe a good work/life balance helps people make better decisions, be more creative and enjoy coming to work. If you thrive in a highly collaborative, fast-paced, supportive environment, then you owe it to yourself to check us out.

• Associates degree in Computer Science, Information Systems, Computer Engineering or a related field
• Three years of experience in IT security incident and event management, incident response, endpoint protection and email security
• A minimum of two active security certifications from an industry recognized certification body (ISC2, CompTIA, EC-Council, etc.) may be substituted for the combined education and experience requirements
• Equivalent education and experience are accepted

• Please include ALL prior work experience on your application and resume.

• Demonstrable experience with common security tools, such as firewalls, cloud providers, SIEM tools, IDS/IPS, endpoint protection, email security or identity providers
• Familiarity with common Information Security frameworks and standards and compliance and regulations such as ISO 27001/27002, NIST, PCI-DSS, HITRUST, HIPAA and HITECH
• Active security certifications, such as Security+ or CySA+ preferred
• Experience documenting complex technical designs and implementation strategies
• Experience identifying, analyzing, responding to and remediating security events in a timely manner
• Experience designing and implementing technical education materials, as well as conducting technical training with diverse audiences
• Experience utilizing enterprise security platforms, including but not limited to firewalls, intrusion…