IT Cyber Security Analyst

$62,000 - $89,380/Yr

Miami Parking Authority - Miami, FL

Full-time - Mid Level

Miami, FL

Personal and Laundry Services

About the position

The IT Cyber Security Analyst position at the Miami Parking Authority involves specialized technical work focused on the research, development, implementation, and administration of security components within the Information Technology Department. This role is critical in safeguarding the complex network that supports both operational and public safety functions for the City of Miami. The analyst will be responsible for continuously monitoring security alerts and notifications from various tools and platforms to identify potential threats and vulnerabilities. This includes assisting in the investigation and response to security incidents, performing initial triage, and documenting findings. In addition to incident response, the analyst will manage annual incident response testing and conduct basic threat analysis to understand emerging threats relevant to the organization's environment. The role also involves supporting the configuration and maintenance of security tools and systems, ensuring they are properly tuned and up to date. The analyst will help identify, assess, and prioritize vulnerabilities in systems and applications, assisting with remediation efforts as necessary. Maintaining and updating security documentation, including policies, procedures, and incident reports, is also a key responsibility. The analyst will assist in developing and delivering cybersecurity awareness training to staff members and support compliance efforts related to cybersecurity frameworks and standards such as PCI and NIST. Other responsibilities include maintaining a disaster recovery strategy, managing software and hardware lifecycle and patch management, and overseeing the organization's firewall infrastructure to safeguard network traffic. The role also encompasses managing Intrusion Detection/Prevention Systems (IDS/IPS), antivirus solutions, and Security Information and Event Management (SIEM) tools, as well as supporting the management of Virtual Private Networks (VPNs) and email security solutions. The analyst will also audit Identity and Access Management (IAM) systems to control and monitor user access and authentication, ensuring the integrity and security of data backup and recovery systems.

Responsibilities

• Continuously monitor security alerts and notifications from various tools and platforms to identify potential threats and vulnerabilities.
• Assist in investigating and responding to security incidents, including performing initial triage and documenting findings.
• Manage annual incident response testing.
• Conduct basic threat analysis and research to understand emerging threats and vulnerabilities relevant to our environment.
• Support the configuration and maintenance of security tools and systems to ensure they are properly tuned and up to date.
• Help identify, assess, and prioritize vulnerabilities in systems and applications, and assist with remediation efforts.
• Maintain and update security documentation, including policies, procedures, and incident reports.
• Assist in developing and delivering cybersecurity awareness training to staff members.
• Support compliance efforts related to cybersecurity frameworks and standards (e.g., PCI, NIST).
• Maintain a disaster recovery strategy and procedures backup plan.
• Manage software and hardware lifecycle and patch management.
• Monitor and manage the organization's firewall infrastructure to safeguard network traffic.
• Oversee IDS/IPS systems to detect and respond to malicious activities and policy violations.
• Maintain and update antivirus solutions and endpoint protection tools to prevent and respond to malware threats.
• Utilize SIEM tools to collect, analyze, and correlate security event data from various sources.
• Support the management and security of VPNs used for remote access.
• Monitor and manage email security systems to prevent phishing and other email-based threats.
• Assist in ensuring the integrity and security of data backup and recovery systems.
• Audit IAM systems to control and monitor user access and authentication.
• Monitor centralized log management system.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent work experience.
• Cybersecurity certifications such as GIAC Security Essentials (GSEC) or PCI Professional Qualification (PCIP) or similar.
• Familiarity with security tools and technologies (e.g., firewalls, intrusion detection systems, antivirus software).
• Knowledge of networking protocols and concepts.
• Strong analytical and problem-solving skills with the ability to think critically and act decisively in high-pressure situations.
• Excellent written and verbal communication skills, with the ability to clearly articulate security issues and recommendations.
• Meticulous attention to detail and a strong commitment to maintaining data integrity and confidentiality.
• Ability to work collaboratively in a team environment and contribute to a positive and productive work culture.
• Minimum of 1 year of hands-on experience managing Windows servers, and common network technologies like switches, routers, and firewalls.

Benefits

• Flexible schedule