Information Security Analyst I

• Health Insurance - Public Employee Health Program (PEHP):
• 3 medical plan options. Choose a Traditional or High Deductible Health Plan. (There is an Opt-Out Cash Benefit option for those that have other medical insurance coverage)
• 5 dental plan options (There is an Opt-Out Cash Benefit option for those that have other dental insurance coverage)
• 4 vision plan options under EyeMed or OptiCare
• Retirement - Utah Retirement Systems (URS):
• Employees hired on or after than 7/1/2011 and have never been in the URS retirement system have two options for retirement in the Tier II System. Employer contributions to your 401(k) are vested after four years.
• Employees who have any service credit with an employer covered by the Utah Retirement Systems prior to 7/1/2011 are in Tier I Public Employees System.
• Tier 2 Hybrid Retirement System. Employer contributes an amount equal to 10% of your salary between both plans (pension and 401(k))
• Tier 2 Defined Contribution Plan. Employer contributes an amount equal to 10% of your salary to a 401(k) plan only.  
• Employees who have any service credit with an employer covered by the Utah Retirement Systems prior to 7/1/2011 are in Tier I Public Employees System.
• Paid Time Off:
• Annual leave and sick leave are accrued at 4 hours per pay period each (4 hours annual, 4 hours sick).
• Annual leave increases with years of service. 
• There are also 12 paid holidays.

Primary Duties:

• Work with local governments to install security software and services, ensure proper function of provided security services.
• Working with local government entities, set up appropriate scans, reporting, troubleshoot, and review of supported security services to ensure they are properly installed, functioning, and providing the expected security.
• Assist local governments with navigating and implementing .gov for their websites and email systems.
• Conduct security consulting with local governments.
• Conduct cybersecurity related outreach with local governments through briefs, meetings, presentations, service onboarding calls, information service/program calls, attending conferences/commissions, websites, etc.
• Track, administer, and purse funding for cybersecurity programs for local governments.
• Support, track, manage cybersecurity programs available to local governments.
• Assist with the implementation of cybersecurity software available to local governments.
• Assist with the development of cybersecurity best practice policies, procedures, templates, and documentation.
• Monitor and reviews threat intelligence and performs threat hunting.
• Communicate alerts regarding threats, intrusions and compromises to stakeholders, network infrastructure, applications, and operating systems, where applicable.
• Assist with implementation of countermeasures or mitigating controls.
• Monitor and assist with understanding compliance, such as, NIST Cybersecurity framework, PCI DSS Compliance, IRS FTI compliance, HIPAA Compliance, CJIS Compliance or any other regulatory compliance that is applicable to the local governments supported.
• Perform / assist entities with risk and vulnerability assessments.
• Perform and coordinate Security Incident Response activities with local government entities.
• Assist with security assessments for local government systems/applications.

WHAT WE ARE LOOKING FOR:
To be successful in this role, the selected candidate will need proven intrinsic characteristics, professional working or educational experience with security operations and information technology, analytical experience, collaborative and communicative characteristics, a willingness to be responsive outside normal work hours, and possess some awareness and/or understanding of compliance requirements.

PREFERENCE MAY BE GIVEN FOR THE FOLLOWING:

• Networking operations experience and/or certifications
• Computer programming experience and/or skills 
• Practical DevSecOps and agile experience and/or skills 
• Law enforcement and/or compliance experience 
• Experience supervising information technology/security operations
• Relevant educational degrees, or equivalent work experience
• Experience in Desktop Support Operations

• Knowledge in IT support functions and implementation of software within varied IT environments.
• Knowledge in and application of cybersecurity practices and their implementation.
• Knowledge in and application of security compliance, assessments, and audits.
• Knowledge in and use of different types of cybersecurity software such as vulnerability management, patching, MFA, email security, endpoint protection, secure backups, and other similar types of systems.
• Knowledge, training, certification, practical application and/or education in information technology such as, desktop support, security, networking, hosting, and other similar IT disciplines.

• Employment contingent on passing a drug screening and a background check.
• Risks found in the typical office setting, which is adequately lighted, heated and ventilated, e.g., safe use of office equipment, avoiding trips and falls, observing fire regulations, etc
• Work requires physical exertion. May require the ability to stand; walk over rough surfaces; bend, crouch, stoop, stretch, reach, lift moderately heavy items (up to 50 lbs.).
• This position is currently a grant funded position.