IT Security Analyst 3
kaavDimondale (MI)
About the role
Senior Security Analyst The Senior Security Analyst position works as a member of the Incident Response Team. This position reviews and remediates cyber incidents, alerts and vulnerabilities in the State of Michigan (SOM) environment and maintains the confidentiality, integrity, and availability of SOM data. The Senior Security Analyst completes mid to high-level cyber investigations involving the security of the SOM network.
Responsibilities:
Reviews, validates and documents security procedures, standard operating procedures for undocumented incidents, and lessons learned.
Reviews security incidents for actual or potential breaches or non-compliances and ensures that all identified events are promptly and thoroughly investigated, as needed.
Reviews metrics on the performance of security responsibilities, controls, and design. Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis.
Serves as an Incident response specialist for cyber event detection, correlation, response, and recovery.
Operates Incident Response tools and determines configuration for tools that are used to collect and analyze data to meet program reporting and evaluation requirements. Incident data includes incident tickets serviced, requests sent through to the IR team, IR actions, and the results of IR investigations.
Coordinates security responses and root-cause for all cyber security related events for the State of Michigan.
Analyzes / Provides recommendations to management and executives on trending threats and how security can be improved on a State-wide basis as well as provide routine updates to management on the progress and status of active events.
Interfaces with other agencies to assist and make recommendations on how to improve the security posture and reduce the number of security related events.
May be part of an on-call rotation with potential for weekend/afterhours work.
Escalates as necessary.
Other duties as assigned.
Required Skills:
- Network Security
- Basic Qualification:
- Additional Skills:
- This is a high PRIORITY requisition.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.