CyberSecurity Analyst II

City of Philadelphia - Philadelphia, PA

Full-time - Mid Level

Philadelphia, PA

10,001+ employees

Executive, Legislative, and Other General Government Support

About the position

The Cyber Security Analyst II at Jefferson is responsible for maintaining the integrity and security of enterprise-wide systems, networks, and applications. This role supports cyber security initiatives through predictive and reactive analysis, articulating emerging trends to leadership and staff. The analyst will actively participate in incident response efforts, ensuring timely and complete resolution of security incidents, and will develop detection and response capabilities based on threat data analysis.

Responsibilities

• Develop and carry out information security policies and standards.
• Implement cyber security tools for detection, prevention, and analysis of security threats.
• Develop security strategies for responding to and recovering from security breaches.
• Conduct awareness training for the workforce on cyber security standards and best practices.
• Analyze and investigate network and system intrusions and malware attacks, recommending prevention methods.
• Manage multiple security products through their lifecycle, including DLP, Vulnerability Management, and SIEM.
• Mentor junior team members to ensure their success.
• Review IT systems and business processes to identify security risks and regulatory non-compliance.
• Design and deliver training on various Cyber Security initiatives.
• Conduct various cyber security assessments, including risk assessments and vulnerability assessments.

Requirements

• Bachelor's degree in an information technology field preferred.
• At least five years of experience in an information security function.
• Strong understanding of Cyber Security & IT controls, network/systems/application penetration testing, and vulnerability assessments.
• Experience with NIST and ISO frameworks.
• Solid knowledge of HIPAA, HITECH, and other IT security regulations.
• At least one information security certification, such as SSCP, GSEC, or a professional certificate required.

Nice-to-haves

• CISSP or CISM certification preferred.
• Experience with Data Loss Prevention (DLP) systems in both on-premise and cloud environments.
• Experience in cyber security incident response and forensic investigations.

Benefits

• Health insurance coverage
• 401k retirement savings plan
• Paid holidays
• Professional development opportunities
• Flexible scheduling options