Cybersecurity Analyst

Title: Cybersecurity Analyst
Location: City Hall, Suffolk VA 23434

Job Summary

Immediate need for a Cybersecurity Analyst who can implement security measures for information systems, regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information. The Cybersecurity Analyst is responsible for evaluating, administering, and auditing security measures to restrict unauthorized access or use of data systems and databases. Coordinates any security investigations and executes preventive measures.

To perform this job successfully, an individual must be able to apply these essential job functions satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the primary job functions herein described. Since every duty associated with this position may not be described herein, employees may be required to perform duties not specifically spelled out in the job description, but which may be reasonably considered to be incidental in the performing of their duties just as though they were written out in this job description.

Essential Job Functions

• Monitor the City’s networks for security breaches and investigate when one occurs.
• Use and maintain software, such as Firewalls, data encryption programs, Email filters, Anti-Virus, and Intrusion Detection Systems, to protect sensitive information.
• Check for vulnerabilities in computer and network systems.
• Research the latest information technology (IT) security trends.
• Prepare reports that document general metrics, attempted attacks, and security breaches.
• Implement security standards and best practices for the organization.
• Recommend security enhancements to management or senior IT staff.
• Assist and train end-users when implementing new security products and procedures.
• Works with Information Technology staff and other departments to implement solutions related to the security within the City.
• Performs other related duties as required.

Required Qualifications

Bachelor's degree in Information Technology, Information Systems with an emphasis on Cyber security or directly related field of study, and 3 years of experience in Information security and/or Cybersecurity;

Industry-related certifications, e.g., CompTIA Security+, CompTIA Cybersecurity Analyst+ (CySA+, (ISC)2 Certified Information Systems Security Professional (CISSP), ISACA Certified Information Security Manager (CISM), CompTIA CASP+, EC-Council Certified Ethical Hacker (CEH), and/or Global Information Assurance Certification (GIAC) Security Leadership(GSLC) are preferred.

Must have experience with:

• Microsoft 365 E5 Security Features (Defender, Purview, Intune, Compliance)

• Microsoft Sentinel SIEM (including KQL and playbook development)

• Palo Alto firewalls

• Tenable vulnerability management tools

Regarding the required technologies, here are the priorities:

1. Most critical:
   • Microsoft 365 security stack (Defender, Purview, Compliance, Intune)
   • Microsoft Sentinel SIEM (including hands-on KQL experience)

2. Important but not required at the same depth:
   • Tenable vulnerability management tools
   • Palo Alto firewalls

Candidates do not need all four Microsoft 365 tools (Defender, Purview, Compliance, Intune), but they must have strong hands-on experience with at least two, and familiarity with the others is strongly preferred. However, Sentinel and KQL experience are non-negotiable for this role.

Knowledge, Skills & Abilities

• Requires complex technical expert