Information Security Analyst

Dexian LTD. - Tallahassee, FL

Full-time - Mid Level

Tallahassee, FL

10,001+ employees

About the position

The Information Security Analyst Level 2 position at Dexian is a long-term contract role based in Tallahassee, FL, focusing on safeguarding the organization's information assets through systems control and digital forensics. The successful candidate will join a dynamic Information Security team and will be responsible for developing, implementing, and maintaining security controls to protect information systems from unauthorized access, modification, or destruction. This role requires a proactive approach to security, including conducting regular security assessments and vulnerability scans on systems, networks, and applications. The analyst will monitor and respond to security incidents and alerts, ensuring timely and effective resolution while collaborating with IT and other departments to ensure that security policies and procedures are consistently applied. In addition to systems control, the role emphasizes digital forensics. The analyst will perform digital forensic investigations to identify, collect, and analyze electronic evidence related to security incidents. This includes documenting and reporting findings from forensic investigations, providing detailed analysis and recommendations, and maintaining the chain of custody for digital evidence in accordance with legal and organizational requirements. The analyst will also assist in the development and implementation of incident response plans and procedures, ensuring that the organization is prepared to handle security incidents effectively. The position requires staying current with the latest security trends, threats, and technology solutions, as well as providing guidance to staff on information security best practices and policies. The analyst will assist in the development and maintenance of security documentation, including policies, procedures, and guidelines, and will participate in security audits and assessments, both internal and external. Other duties may be assigned as needed, related to Information Security.

Responsibilities

• Develop, implement, and maintain security controls to protect information systems from unauthorized access, modification, or destruction.
• Conduct regular security assessments and vulnerability scans on systems, networks, and applications.
• Monitor and respond to security incidents and alerts, ensuring timely and effective resolution.
• Collaborate with IT and other departments to ensure security policies and procedures are consistently applied.
• Perform digital forensic investigations to identify, collect, and analyze electronic evidence related to security incidents.
• Document and report findings from forensic investigations, providing detailed analysis and recommendations.
• Maintain chain of custody for digital evidence and ensure it is handled according to legal and organizational requirements.
• Assist in the development and implementation of incident response plans and procedures.
• Stay current with the latest security trends, threats, and technology solutions.
• Provide guidance to staff on information security best practices and policies.
• Assist in the development and maintenance of security documentation, including policies, procedures, and guidelines.
• Participate in security audits and assessments, both internal and external.
• Other duties as assigned related to Information Security.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3-5 years of experience in information security, with a focus on systems control and digital forensics.
• Understanding of information security principles, practices, and technologies.
• Proficiency in forensic tools and techniques.
• Experience with security monitoring tools (e.g., SIEM, IDS/IPS) and vulnerability management solutions.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills.
• Ability to work independently.

Nice-to-haves

• Experience in incident response and handling.
• Knowledge of regulatory requirements and standards (e.g., GDPR, HIPAA, PCI-DSS).
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation of security tasks.
• Experience with cloud security platforms (e.g., AWS, Azure).
• Professional certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.