Information Technology Specialist 2 (Information Security)

Under the direction of the Chief Information Security Officer, within the Information Security Office (ISO), the Information Technology Specialist 2 (Information Security) will primarily manage incident response of the uniquely sensitive data and the high-profile threats the ISO faces, as well as the highly confidential legal and investigative data. Incident responders are crucial for swift, decisive action when security breaches occur, minimizing damage and preserving public trust. The incumbent will rapidly assess the scope of a breach, contain its spread, and prevent further data exfiltration, while minimizing potential legal ramifications and protecting sensitive information from public disclosure. The incumbent will analyze complex attack patterns, identify vulnerabilities, and implement effective remediation strategies, while strengthening the ISO’s overall security posture and reducing the likelihood of future incident.

• Continuously monitor the SIEM and other security tools for alerts and anomalies that could indicate a security incident.
• Analyze and prioritize security alerts based on their severity, potential impact, and the criticality of the affected systems.
• Conduct preliminary analysis of security events to gather evidence, identify indicators of compromise (IOCs), and determine the nature of the threat.
• Create and maintain detailed records of all security incidents, including the timeline of events, actions taken, and final resolution.
• Escalate confirmed security incidents for in-depth investigation and response.
• Assist in the creation of daily, weekly, and monthly reports on security events, key performance indicators (KPIs), and the overall security posture.
• Participate in vulnerability scanning, review scan results, and assist in the initial assessment and prioritization of vulnerabilities.
• Stay informed about the latest cybersecurity threats, vulnerabilities, and attack techniques by reviewing threat intelligence feeds and industry publications.
• Assist in the basic maintenance and configuration of security tools, such as updating signatures and tuning rules to reduce false positives.
• Work closely with other team members and other IT departments to support security initiatives and incident response activities.
• Other duties as assigned.

Minimum Qualifications

Two years* of information technology, cybersecurity, or information assurance experience.

*Substitutions: A bachelor's or higher-level degree including or supplemented by 15 semester credit hours in computer science substitutes for both years of required experience; or a bachelor's or higher-level degree in any field substitutes for one year of required experience; 60 semester credit hours including or supplemented by 15 semester credit hours in computer science substitutes for one year of required experience.