Senior Information Security Analyst (2-Year Term)

If you would enjoy working in a dynamic environment and are looking for an opportunity to become part of a stellar team of professionals, we invite you to apply online today.

Posting Period:

March 14, 2026 - Until Filled

Employee Type:

NEASO NEA Staff Organization, OO114 Information Technology Services Department (ITS)

Position Type:

Regular (fixed-term) (Fixed Term)

Salary Range:

$102,062.00 - $158,178.00

Rank:

NEASO Rank 7

Position Details:

This 2-year Term position supports the NEA’s strategic objective to focus the energy and resources of its 3 million members toward the promotion of public education by providing high level safety of Information Technology assets and to protect systems from intentional or inadvertent access, harm, or destruction.
 

Position Summary: Individual will demonstrates ownership, accountability, and a security-first mindset while responding quickly to security incidents and escalations. Responsibilities include assisting in the development and implementation of security standards, procedures and guidelines for multiple platforms and diverse systems environment. Responsibilities will also include scans and analysis of scan reports related to PCI compliance and completing necessary PCI related documentation for submission to bank(s) to assert compliance with PCI standards. The incumbent updates, maintains, and documents security controls and works collaboratively with other teams to ensure that new and existing infrastructure, software, hardware, architecture, and applications are developed and deployed in a secure manner. The incumbent will assis in the development and management of security for one or more IT functional areas; implementing and maintaining security technology solutions which may include encryption, firewalls, identity management solutions and associated authentication (AuthN), authorization (AuthZ) , intrusion detection, and gateway security controls and other associated security related technology. Other duties include: analyzing and preparing status reports on security matters; monitoring and recommending solutions for correcting issues related to security technology performance and capabilities, security breech response, etc. To carry out responsibilities, the incumbent uses a personal computer, associated software, and other office technology.

MINIMUM EDUCATION: Bachelor degree in Computer Science, or Information Security (or related discipline) or an equivalent combination of education and experience from which comparable knowledge and skills may be acquired. MINIMUM QUALIFICTIONS: Five or more years experience working directly with Identity Management Platforms such as OKTA, PING, CyberArk, Microsoft Entra - including knowledge of SAML2, Oauth, and other open standard protocols used for modern authentication and authorization Five or more years experience in the security aspects relating to multiple platforms, operating systems, software, communications and network protocols. Five or more years experience with networking and security technologies such as IPSEC (Internet Security Protocol), VPN (Virtual Private Network), routers, switches, firewalls, intrusion detection and prevention, data leakage, WAF (Web Application Firewall). OTHER REQUIREMENTS: Experience with some aspects of information security and compliance, such as PCI, SOX, and HIPAA requirements for information systems and industry best practices such as ISO17799/27011, NIST (National Institute of Standards and Technology). Some travel required (15-20 overnights per year).

SELECTION CRITERIA: TIER 1 (Essential): Extensive knowledge of business operations. Experience in identifying underlying principles, reasons, or facts of information or data into separate parts. .Demonstrated experience with information security and compliance, such as PCI, SOX, and HIPAA requirements for information systems and industry best practices such as ISO17799/27011, National Institute of Standards and Technology (NIST).

Demonstrated experience building secure access with Identity and Access Management systems such as OKTA, PING, CyberArk, Microsoft Entra including knowledge of SAML2, Oauth, and other open standard protocols used for modern authentication and authorization.

Experience with security and risk frameworks, standards and best practices.

Demonstrated experience in monitoring and reviewing information from materials, events, or the environment, to detect or assess security related problems. Broad knowledge of security on SaaS solutions, access methodologies, and security procedures. Successful references. TIER 2 (Significant): Knowledge of industry best practice standards pertaining to Information Security and data privacy. Significant experience in collaborating with others for purposes of identifyin