Information Security Analyst 2

State of Arkansas - Huntsville, AR

Full-time - Mid Level

Huntsville, AR

Executive, Legislative, and Other General Government Support

About the position

The Information Security Analyst 2 is responsible for safeguarding the organization's information systems by developing, configuring, deploying, and supporting various security tools. This role involves conducting forensic analysis, responding to incidents, and collaborating with various teams to enhance security measures and policies. The position requires a proactive approach to identifying and mitigating threats while ensuring compliance with relevant laws and regulations.

Responsibilities

• Conducts computer forensic analysis, data recovery, eDiscovery, and other IT investigative work, recommending resolutions to management based on root cause analysis.
• Researches emerging threats and vulnerabilities to aid in the identification of incidents and supports the creation of new architecture, policies, standards, and guidance to address them.
• Provides incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
• Conducts network monitoring and intrusion detection analysis using various computer network defense (CND) tools, such as IDS/IPS, firewalls, and HBSS.
• Correlates network activity across networks to identify trends of unauthorized use.
• Collaborates with fraud examiners, other IT investigative experts, counsel, HR, and other IT technical personnel in investigations.
• Designs, develops, debugs, tests, reverse engineers, documents, and maintains computer programs for security applications.
• Works with SIEM to manage/tune the system, create/manage detection content, and actively watch for alerts.
• Works with threat intelligence and/or threat-hunting teams to develop and execute plans.
• May be required to perform work after hours.
• May participate in on-call rotations as needed.
• Understands and complies with bank policy, laws, regulations, and the bank's BSA/AML Program, as applicable to job duties.

Requirements

• Advanced expertise in developing, configuring, deploying, and supporting security tools.
• Knowledge of best and emerging practices in various information security domains.
• Experience in conducting computer forensic analysis and data recovery.
• Proficiency in network monitoring and intrusion detection analysis using CND tools.
• Ability to collaborate with various teams in investigations and incident response.

Nice-to-haves

• Experience with security information and event management (SIEM) systems.
• Familiarity with threat intelligence and threat-hunting methodologies.

Benefits

• Diversity, equity, and inclusion initiatives in the workplace.