Information Security Analyst 2

State of Arkansas - Fayetteville, AR

Full-time

Fayetteville, AR

Executive, Legislative, and Other General Government Support

About the position

The Information Security Analyst 2 is responsible for enhancing the security posture of the organization by developing, configuring, deploying, and supporting various security tools and configurations. This role involves conducting forensic analysis, responding to incidents, and collaborating with various teams to ensure the integrity and security of information systems. The analyst will also research emerging threats and vulnerabilities, contributing to the development of policies and standards to mitigate risks.

Responsibilities

• Conducts computer forensic analysis, data recovery, eDiscovery, and other IT investigative work, recommending resolutions to management based on root cause analysis.
• Researches emerging threats and vulnerabilities to aid in the identification of incidents and supports the creation of new architecture, policies, standards, and guidance to address them.
• Provides incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
• Conducts network monitoring and intrusion detection analysis using various computer network defense (CND) tools, such as IDS/IPS, firewalls, and HBSS.
• Correlates network activity across networks to identify trends of unauthorized use.
• Collaborates with fraud examiners, other IT investigative experts, counsel, HR, and other IT technical personnel in investigations.
• Designs, develops, debugs, tests, reverse engineers, documents, and maintains computer programs for security applications.
• Works with SIEM to manage/tune the system, create/manage detection content, and actively watch for alerts.
• Works with threat intelligence and/or threat-hunting teams to develop and execute plans.
• May be required to perform work after hours.
• May participate in on-call rotations as needed.
• Understands and complies with bank policy, laws, regulations, and the bank's BSA/AML Program, as applicable to job duties.

Requirements

• Advanced expertise in developing, configuring, deploying, and supporting security tools and configurations.
• Knowledge of best and emerging practices in various information security domains.
• Experience in conducting computer forensic analysis and IT investigative work.
• Familiarity with network monitoring and intrusion detection analysis tools.
• Ability to collaborate with various teams and stakeholders in investigations.

Nice-to-haves

• Experience with security information and event management (SIEM) systems.
• Knowledge of threat intelligence and threat-hunting methodologies.

Benefits

• Diversity, equity, and inclusion initiatives in the workplace.