Information Security Analyst

Company Description

A best-in-class city that attracts best-in-class talent, Philadelphia is an incredible place to build a career. From our thriving arts scene and rich history to our culture of passion and grit, there are countless reasons to love living and working here. With a workforce of over 30,000 people, and more than 1,000 different job categories, the City of Philadelphia offers boundless opportunities to make an impact. 
As an employer, the City of Philadelphia values inclusion, integrity, innovation, empowerment, and hard work above all else. We offer a vibrant work environment, comprehensive health care and benefits, and the experience you need to grow and excel. If you’re interested in working with a passionate team of people who care about the future of Philadelphia, start here.

What We Offer:
•    Impact - The work you do here matters to millions. 
•    Growth - Philadelphia is growing, why not grow with it? 
•    Diversity & Inclusion - Find a career in a place where everyone belongs.
•    Benefits - We care about your well-being.
 

The Office of Innovation & Technology (OIT) is the central IT agency for the City of Philadelphia headed by the Chief Information Officer (CIO). OIT oversees all major information and communications technology initiatives for the City of Philadelphia - increasing the effectiveness of the information technology infrastructure, where the services provided are advanced, optimized, and responsive to the needs of the City of Philadelphia’s businesses, residents, and visitors. OIT responsibilities include: identifying the most effective approach for implementing new information technology directions throughout city government; improving the value of the city’s technology assets and the return on the city’s technology investments; ensuring data security continuity; planning for continuing operations in the event of disruption of information technology or communications services; and supporting accountable, efficient and effective government across every city department, board, commission and agency.

Job Description

The Information Security Analyst – Security Operations Center (SOC) position will play a critical role in the City of Philadelphia’s, Information Security Group’s, monitoring, detecting, analyzing, and responding to cybersecurity threats in real time. This position is responsible for safeguarding the City’s digital infrastructure by leveraging advanced security tools, threat intelligence, and incident response protocols. The ideal candidate will have hands-on experience in a SOC environment, a strong understanding of cyber threat landscapes, and the ability to collaborate across departments.

Essential Functions

• Monitor and analyze security events using SIEM and other SOC tools.
• Detect, investigate, and respond to cybersecurity incidents.
• Conduct vulnerability assessments and penetration testing.
• Document and communicate risks, incidents, and remediation plans.
• Develop and maintain security monitoring procedures and incident response playbooks.
• Track and report on the effectiveness of security controls and technologies.
• Support compliance efforts with relevant regulatory frameworks (e.g., NIST, CJIS, HIPAA).
• Participate in security projects and continuous improvement initiatives.
• Perform other duties as assigned.

Competencies, Knowledge, Skills and Abilities

An Information Security Analyst plays a critical role in protecting the City’s information systems and data from security breaches, cyber threats, and other vulnerabilities. Some core competencies required for this position include, but not limited to:

Technical Proficiency

• Experience with SIEM, EDR, IDS/IPS, firewalls, and vulnerability management tools. (e.g, Splunk, Crowdstrike, Nessus, Rapid7, CloudFlare)
• Strong understanding of Windows, Linux, and network security principles.
• Familiarity with GRC platforms and forensic tools.

Cybersecurity Expertise

• Knowledge of threat intelligence, attack vectors, and incident response.
• Understanding of regulatory frameworks (e.g, NIST, HIPAA, CJIS, PCI-DSS, OWASP, etc.).
• Ability to conduct ethical hacking and penetration testing using available tools is preferred but not required.

Analytical & Communication Skills

• Strong critical thinking and problem-solving abilities.
• Ability to communicate technical issues to non-technical stakeholders.
• Skilled in writing clear, actionable reports and documentation.

Professional Attributes

• High ethical standards and commitment to confidentiality.
• Adaptability to evolving threats and technologies.