IT Security Analyst 3 (Hybrid work, Required LOCAL to MI) - In-Person Interview is Must

RICEFW Technologies - Windsor charter Township, MI

Full-time - Mid Level

Windsor charter Township, MI

Web Search Portals, Libraries, Archives, and Other Information Services

About the position

The Security Analyst position is a critical role within the Vulnerability Management Team, focusing on the review and remediation of cyber incidents and vulnerabilities. This position is essential for maintaining the confidentiality, integrity, and availability of data for the State of Michigan. As a Senior Security Analyst, you will be responsible for planning, scheduling, implementing, and maintaining scalable vulnerability scans using modern vulnerability management scanning tools tailored for high complexity devices. Your work will ensure that scanning processes are safe and timely, minimizing any potential impact on the scan targets. In addition to managing vulnerability scans, you will provide troubleshooting support for any technical issues that arise during the scanning process. You will also support various vulnerability management scanning and reporting tools, conducting internal audits of servers, network devices, applications, and other critical infrastructure. Your role will involve interfacing with both internal and external auditors, providing them with detailed information regarding remediation efforts. A significant aspect of your responsibilities will include creating integrations of vulnerability management data with other enterprise services within the State of Michigan. You will conduct thorough data analysis of vulnerability management data, often integrating it with other data sources to measure the effectiveness of remediation efforts. This will involve working with large datasets that may include structured, semi-structured, and unstructured data. Furthermore, you will interface with other agencies to provide recommendations aimed at improving the overall security posture and reducing the number of security-related vulnerabilities. You will also be tasked with conducting trend analysis and creating dashboards using data scripting to provide metrics on the performance of security responsibilities and controls. This includes generating new reports for management based on the metrics collected across multiple agencies. As a Senior Security Analyst, you will escalate issues as appropriate, ensuring that all vulnerabilities are addressed in a timely and effective manner.

Responsibilities

• Plan, schedule, implement, and maintain scalable vulnerability scans using modern vulnerability management scanning tools for high complexity devices.
• Ensure safe and timely scanning with minimal/no impact on scan targets and troubleshoot technical issues with scans.
• Support vulnerability management scanning and reporting tools.
• Conduct internal vulnerability audits of servers, network devices, applications, and other devices.
• Interface with internal and external auditors, providing detailed information on remediation efforts.
• Create integrations of vulnerability management data with other State of Michigan enterprise services.
• Conduct data analysis of vulnerability management data, integrating with other data sources to measure effectiveness of vulnerability remediation.
• Perform trend analysis and create dashboards using data scripting to provide metrics on the performance of security responsibilities and controls.
• Create new reports for management based on collected metrics across multiple agencies.
• Interface with other agencies to make recommendations on improving security posture and reducing security-related vulnerabilities.
• Escalate issues as appropriate.

Requirements

• Experience with vulnerability management tools and processes.
• Strong understanding of cybersecurity principles and practices.
• Ability to conduct data analysis on large datasets, including structured, semi-structured, and unstructured data.
• Experience in interfacing with auditors and providing detailed remediation information.
• Proficiency in data scripting for creating dashboards and reports.

Nice-to-haves

• Familiarity with state or government cybersecurity policies and regulations.
• Experience with integrating security data across multiple platforms.
• Knowledge of current trends in cybersecurity threats and vulnerabilities.

Benefits

• Hybrid work environment
• Opportunity for professional development
• Access to advanced cybersecurity tools and technologies