Information Security Analyst 2

$63,300 - $82,300/Yr

Virginia Alcoholic Beverage Control Authority - Mechanicsville, VA

Full-time - Mid Level

Mechanicsville, VA

Food and Beverage Retailers

About the position

The Virginia Alcoholic Beverage Control Authority is seeking an Information Security Analyst 2 to join its Security Operations (SecOps) Team. This position is crucial in ensuring that a consistent, dependable, and high level of technical security is maintained on the authority's data and information systems. The primary responsibility of the Information Security Analyst is to protect the authority's systems by monitoring for incidents and misuse, designing and documenting controls to safeguard those systems, and implementing or directing the implementation of these controls. The role involves system monitoring for actionable information, developing controls for improvement, and documenting processes for later implementation. Key monitoring functions include regular reviews of web proxy logs, intrusion detection systems, and SIEM monitoring using technologies such as Splunk and Microsoft Sentinel. The analyst will need to possess technical knowledge and the ability to cultivate relationships with vendors and IT staff to effectively troubleshoot Linux and Windows Server environments, develop firewall rules, configure systems, and implement system hardening processes. In addition to these primary functions, the analyst will enforce and implement authority security policies and standards, serve as a subject matter expert on project teams, assist the Information Security Officer in identifying security goals and objectives, and provide technical guidance regarding information security matters. The position also includes responsibilities for security assessments, analysis, and maintaining relationships necessary for sound IT security practices.

Responsibilities

• Monitor authority systems for incidents and misuse.
• Design and document controls to protect systems.
• Implement or direct the implementation of security controls.
• Regularly review web proxy logs and intrusion detection systems.
• Conduct SIEM monitoring using Splunk and Microsoft Sentinel.
• Troubleshoot Linux and Windows Server environments.
• Develop and configure firewall rules.
• Implement system patching and hardening processes.
• Enforce and implement authority security policies and standards.
• Serve as a subject matter expert on project teams as needed.
• Assist the Information Security Officer in identifying security goals and objectives.
• Provide technical guidance regarding information security matters.
• Assist with information security assessments and maintain constituent relationships.

Requirements

• Bachelor's degree in Information Systems or a related field.
• Experience with security operations and threat analysis.
• Proficiency in configuring SIEM platforms such as Splunk or Microsoft Sentinel.
• Subject matter expertise in Windows and Linux systems.
• Experience with information security monitoring and alerting.
• Knowledge of Microsoft Defender, Azure AD, and Office 365.
• Familiarity with multi-factor authentication and single sign-on systems.
• Experience with intrusion detection systems and disaster recovery processes.
• Understanding of networking protocols, encryption, and firewalls.
• Knowledge of incident response and wireless network security.
• Familiarity with NIST 800-53 and COV SEC-501 standards.

Nice-to-haves

• Industry standard security certifications such as Incident Response, Penetration Testing, or Digital Forensics.
• Experience with forensics training or other related certifications.

Benefits

• Tuition reimbursement
• Paid time off (PTO) earned every two weeks worked
• 14 paid holidays
• Affordable healthcare with employer contributions
• Virginia Retirement System (VRS) benefits