Security Analyst - IT

About the Department

The security analyst is responsible for monitoring and providing sound analysis for the comprehensive enterprise security infrastructure of the City of Midland.

Complete any necessary security reports and audit responses, ensure that the City is compliant with all applicable regulations and participate in Citywide working groups for the development of City security policies, guidelines, best practices, and strategy.

Provide input on such technology.

The security analyst will perform tasks including monitoring the enterprise security posture, phishing simulations, vulnerability tracking, incident response, security awareness training, and implementing policies, standards, controls, and guidelines to improve security, compliance, and audit posture.

This individual must be capable of working in a fast-paced environment with time-sensitive materials, showing initiative, self-motivation, attention to detail, and maintaining strict confidentiality due to the work's nature.

Analyze and maintain the City enterprise security infrastructure Analyze problems, recommend solutions, products, and technologies to meet security objectives Actively protect City information technology assets and infrastructure from external or internal threats and ensure that the City complies with statutory and regulatory requirements regarding information access, security and privacy Implement firewall solutions to properly secure City data and provide consultation on all new firewall implementations, firewall configuration changes, and projects requiring security operational support Assist the end-user, other IT professionals, and external customers in requesting security variances and implementation of subsequent configuration change requests Recommend best security practices to achieve City business objectives, advise on risk assumptions for any variances granted, and provide alternatives to achieve desired end results Assist in incident response for any breaches, intrusions, or theft Monitor systems for any anomalies, perform proper updating, and patching Monitor vendor websites for potential threat alerts and software upgrades Evaluate and perform planning, testing, and implementation of software and hardware upgrades Maintains system documentation and configuration data for regulatory and audit purposes Performs related duties as assigned Subject to recall 24/7

• Analyze and maintain the City enterprise security infrastructure
• Analyze problems, recommend solutions, products, and technologies to meet security objectives
• Actively protect City information technology assets and infrastructure from external or internal threats and ensure that the City complies with statutory and regulatory requirements regarding information access, security and privacy
• Implement firewall solutions to properly secure City data and provide consultation on all new firewall implementations, firewall configuration changes, and projects requiring security operational support
• Assist the end-user, other IT professionals, and external customers in requesting security variances and implementation of subsequent configuration change requests
• Recommend best security practices to achieve City business objectives, advise on risk assumptions for any variances granted, and provide alternatives to achieve desired end results
• Assist in incident response for any breaches, intrusions, or theft
• Monitor systems for any anomalies, perform proper updating, and patching
• Monitor vendor websites for potential threat alerts and software upgrades
• Evaluate and perform planning, testing, and implementation of software and hardware upgrades
• Maintains system documentation and configuration data for regulatory and audit purposes
• Performs related duties as assigned
• Subject to recall 24/7

Ability to sit, stand, and transport self from building to building Ability to kneel, crawl, climb, and twist for purposes of installing and maintaining equipment

• Ability to sit, stand, and transport self from building to building
• Ability to kneel, crawl, climb, and twist for purposes of installing and maintaining equipment

Knowledge, Abilities, and Skills 1 or more years professional experience with current network security protocols, hardware and software Previous experience with Network infrastructure design, including telephony and video Knowledge of regulatory compliance frameworks (NIST CSF & 800-53, CJIS, HIPAA, PCI, etc.). Previous experience with enterprise router and switch configuration Previous experience with enterprise firewalls. Strong understanding of Windows servers and Microsoft Active Directory.? IDS/IPS and Syslog, LAN, WAN, SAN, VPN A Bachelor’s degree in Information Technology or a related field from a regionally accredited institution Possess current CISCO Certified Network Associate (CCNA) certification Strong analytical and problem-solving skills Good oral and written communication skills Solid understanding of networking, communications, and data security Knowledge and experience in IT audit, compliance, risk management, and/or governance is preferred.? Minimum Education, Experience, and Certification Bachelor’s Degree in Information Systems, Computer Science or a related degree plus three years of experience in a related field is required. Four years’ experience may be substituted for the Bachelor’s degree requirement. CompTIA Security+ and CCNA required or the ability to achieve both certifications in one year. Valid Texas Driver’s License.

• 1 or more years professional experience with current network security protocols, hardware and software
• Previous experience with Network infrastructure design, including telephony and video
• Knowledge of regulatory compliance frameworks (NIST CSF & 800-53, CJIS, HIPAA, PCI, etc.).
• Previous experience with enterprise router and switch configuration
• Previous experience with enterprise firewalls.
• Strong understanding of Windows servers and Microsoft Active Directory.?
• IDS/IPS and Syslog, LAN, WAN, SAN, VPN
• A Bachelor’s degree in Information Technology or a related field from a regionally accredited institution
• Possess current CISCO Certified Network Associate (CCNA) certification
• Strong analytical and problem-solving skills
• Good oral and written communication skills
• Solid understanding of networking, communications, and data security
• Knowledge and experience in IT audit, compliance, risk management, and/or governance is preferred.?

2:1 Retirement Plan with TMRS Educational Tuition Assistance Program Public Service Loan Forgiveness Employer Midland Municipal Employee Credit Union Competitive pay Medical/Dental/Vision Plan PTO accrual Paid holidays