Security Analyst

Novalink Solutions

Madison, Wisconsin

Apply

JOB DETAILS

SKILLS

Analysis Skills, Best Practices, Cloud Computing, Communication Skills, Computer Security, Conferences, Continuous Improvement, Corrective Action, Cross-Functional, Customer Support/Service, Customer/Consumer Behavior, Enterprise Protection, Federal Laws and Regulations, Forensic Science, HIPAA (Health Insurance Portability and Accountability Act), Incident Management, Incident Response, Information Technology & Information Systems, Information/Data Security (InfoSec), Intelligence Analysis, Internet Security, Interpersonal Skills, Legal Investigation, Machine Tool, Metrics, Network Support, Operations Processes, People Management, Phishing, Presentation/Verbal Skills, Problem Solving Skills, Procedure Development, Process Improvement, Regulatory Compliance, Reporting Skills, Risk, Risk Analysis, Risk Management, Security Analysis, Security Consulting, Security Information and Event Management (SIEM), Security Infrastructure, Software Development, State Laws and Regulations, Team Player, Technical Consulting, Technical Presentation, Technical Writing, Technology Analysis, Testing, Threat Modeling, U.S. National Institute of Standards and Technology (NIST), Use Cases, Vulnerability Scanners, Web Site Evaluation, Webinar, Writing Skills

LOCATION

Madison, Wisconsin

POSTED

2 days ago

Under the general supervision of the GRC Manager, this position serves as a Security Analyst
<\/div>

responsible for supporting a wide range of compliance and cybersecurity functions across the
<\/div>

Wisconsin Department of Correction (DOC). Core responsibilities include providing risk assessment
<\/div>

and/or compliance support. Taking part in or leading audits, submitting findings, analyzing risks for
<\/div>

specific areas, monitoring corrective actions, and drafting risk reports with metric charts and
<\/div>

ongoing effort accountability. This position assesses, documents, and provides guidance to other IT
<\/div>

staff and non -IT areas on how to align IT operational and technology processes based on information
<\/div>

technology risk assessments and/or with regulatory compliance/audit functions. This position will
<\/div>

also provide support in detecting, analyzing, and responding to cybersecurity threats, participating in
<\/div>

forensic investigations, and contributing to ongoing vulnerability management efforts. The role may
<\/div>

also include supporting cloud security initiatives, assisting with tabletop exercises, and developing
<\/div>

security response procedures.
<\/div>

The incumbent will work collaboratively with internal stakeholders across DOC, as well as external
<\/div>

partners including the Department of Administration’s Division of Enterprise Technology
<\/div>

(DOA/DET). The role will utilize a variety of enterprise security tools and platforms.
<\/div>

This position may be assigned to focus areas such as incident response, phishing mitigation, threat
<\/div>

detection, security awareness, vulnerability scanning, or forensic analysis, depending on
<\/div>

organizational needs. The analyst will represent the DOC Information Security Section (ISS) team in
<\/div>

technical discussions, project work, and collaborative efforts to improve DOC’s cybersecurity
<\/div>

posture.
<\/div>

The position requires strong communication and problem -solving skills, the ability to work
<\/div>

independently on complex tasks, and a commitment to upholding the security and privacy standards
<\/div>

of DOC. Clients and collaborators include information technology (IT) staff, application developers,
<\/div>

infrastructure teams, business units, vendor, and external governmental partners. The work
<\/div>

environment is dynamic, requiring adaptability, initiative, and a proactive mindset.
<\/div>

This position shall comply with the Department’s administrative rules and the agency’s policies
<\/div>

and procedures including those related to the Department's overall Reentry philosophy of using
<\/div>

evidence -based strategies, practices and programs which target an offender’s individual
<\/div>

criminogenic needs and risk level.
<\/div>

TIME % GOALS AND WORKER ACTIVITIES
<\/div>

60% A. Support cybersecurity policy execution, operational standards, and
<\/div>

governance activities.
<\/div>

A1. Review policy, procedures, controls, and standards to ensure DOC and
<\/div>

regulatory standards are met.
<\/div>

A2. Address compliance issues with IT security standards; identifying deficiencies
<\/div>

and recommending control and risk mitigation measures.
<\/div>

A3. Review documentation to ensure it meets standards and applicable regulatory
<\/div>

requirements, standards, or industry best practices.
<\/div>

A4. Assist with the creation of new and updates to policy, process, and technical
<\/div>

controls to determine if they are sufficient and functioning as intended.
<\/div>

A5. Report on risks and mitigations as well as following up to verify that
<\/div>

adjustments were made.
<\/div>

A6. Interpret NIST or other standards to recommend and implement best practices.
<\/div>

A7. Contribute to the maintenance and operationalization of information security
<\/div>

policies, procedures, and response playbooks.
<\/div>

A8. Review new IT projects, systems, and vendor solutions for security risk,
<\/div>

documenting and escalating concerns as needed.
<\/div>

A9. Provide technical consulting and security recommendations aligned with DOC
<\/div>

standards and DOA/DET architecture.
<\/div>

A10. Participate in enterprise -level risk assessments and contribute data to
<\/div>

compliance, audit, or risk reporting needs.
<\/div>

A11. Assist in threat modeling exercises or tabletop simulations designed to
<\/div>

improve preparedness and resiliency.
<\/div>

20% B. Monitor, detect, respond to, and investigate cybersecurity threats across
<\/div>

DOC’s enterprise environment.
<\/div>

B1. Triage, analyze, and respond to cybersecurity alerts using current technologies
<\/div>

and tools.
<\/div>

B2. Conduct forensic investigations into suspected security incidents, including
<\/div>

phishing, account compromise, and endpoint breaches.
<\/div>

B3. Coordinate with internal teams and DOA/DET to contain, eradicate, and
<\/div>

recover from security incidents.
<\/div>

B4. Analyze logs, threat intelligence, and user behavior to identify indicators of
<\/div>

compromise (IOCs) and prevent recurrence.
<\/div>

B5. Document incident response actions and create post -incident reports with
<\/div>

recommended improvements.
<\/div>

B6. Participate in phishing mitigation, email threat response, and takedown
<\/div>

coordination with third -party providers.
<\/div>

B7. Assist in vulnerability validation and risk triage based on vendor and tool
<\/div>

security recommendations.
<\/div>

B8. Support the tuning, configuration, and enhancement of security technologies
<\/div>

used in DOC’s environment.
<\/div>

B9. Assist with employee forensics, HR/legal investigations, and eDiscovery
<\/div>

requests through log and artifact analysis.
<\/div>

B10. Assist with continuous improvement of detection logic, alerts, and response
<\/div>

workflows in current technologies and tools.
<\/div>

15% C. Contribute to the configuration, deployment, and lifecycle management
<\/div>

of security technologies.
<\/div>

C1. Collaborate with internal teams and DOA/DET to implement, monitor, and
<\/div>

maintain endpoint security, network protection, and access control systems.
<\/div>

C2. Assist in the deployment or refinement of security technologies and tools.
<\/div>

C3. Test and validate new use cases or configurations in existing tools and
<\/div>

platforms, reporting anomalies or conflicts.
<\/div>

C4. Maintain technical documentation and inventories related to security tooling,
<\/div>

integrations, and metrics.
<\/div>

5% D. Maintain current expertise in cybersecurity tools, trends, and techniques.
<\/div>

D1. Participate in professional development opportunities such as conferences,
<\/div>

technical training, and webinars.
<\/div>

D2. Track emerging threats, vulnerabilities, and technology trends through vendor
<\/div>

briefings, information sharing groups, and security communities.
<\/div>

D3. Contribute to internal knowledge sharing and cross -training within the
<\/div>

security team.
<\/div>

KNOWLEDGE, SKILLS AND ABILITIES
<\/div>

1. Experience in effective methods of written and oral communication, meeting facilitation, and
<\/div>

presenting to both technical and non -technical staff appropriate to audience and scenario
<\/div>

2. Understanding of NIST Cybersecurity Framework, NIST RMF, and other common security
<\/div>

standards.
<\/div>

3. Experience with techniques used to establish and maintain effective working relationships
<\/div>

with peers and customers
<\/div>

4. Experience in development, approval, and implementation of security documents (policies,
<\/div>

standards, etc.)
<\/div>

5. Knowledge of information security risk activities to include risk assessments, risk registers,
<\/div>

and risk management
<\/div>

6. Knowledge of state and federal laws regarding information security (Ex.HIPAA Security
<\/div>

Rule) as well as experience with audit and compliance activities in conjunction with state and
<\/div>

federal partners/regulators such as, but not limited to, the WI Legislative Audit Bureau and
<\/div>

the U.S. Department of Justice
<\/div>

7. Experience and working knowledge of common security frameworks and control theories to
<\/div>

include current applicable NIST , CJIS, and ISO standards
<\/div>

8. Proficiency in triaging and analyzing cybersecurity alerts using enterprise technologies and
<\/div>

tools.
<\/div>

9. Strong knowledge of threat detection, incident response, and log analysis techniques.
<\/div>

10. Familiarity with phishing mitigation strategies and email threat analysis.
<\/div>

11. Working knowledge of vulnerability management practices, technologies, and tools.
<\/div>

12. Ability to analyze threat intelligence and apply it to strengthen detection and response
<\/div>

mechanisms.
<\/div>

13. Capability to tune and optimize SIEM rules and detection logic to reduce noise and improve
<\/div>

fidelity.
<\/div>

14. Excellent technical writing and documentation skills, including incident reports and playbook
<\/div>

development.
<\/div>

15. Ability to collaborate with cross -functional teams, including DOA/DET, infrastructure, and
<\/div>

development staff.
<\/div>

16. Commitment to continuous learning, professional development, and information sharing.
<\/div>

<\/div><\/span>

Requirements<\/h3>
Top Skills & Years of Experience: At least 2 year's of experience required in the following:
<\/div>
- Understanding of NIST Cybersecurity Framework, NIST RMF, and other common security standards.
<\/div>
- Experience and working knowledge of common security frameworks and control theories to include current applicable NIST, CJIS, and ISO standards
<\/div>
- Experience with creating and leading discussions around the implementation and artifact collection of NIST 800 -53 controls
<\/div>
- Proficiency in triaging and analyzing cybersecurity alerts using enterprise technologies and tools.
<\/div>
- Familiarity with phishing mitigation strategies and email threat analysis.
<\/div>
- Incident Response Forensics and Remediation (i.e. Crowdstrike, Sandbox evaluation & detonation, Phish evaluation, Malicious Website and Malicious Intent Identification)
<\/div>
- Customer service as it pertains to security incident management and communication with end user about dangerous behavior.
<\/div>
- Excellent technical writing and documentation skills, including incident reports and playbook development.
<\/div>
- Ability to work independently and as part of a distributed team to achieve shared objectives.
<\/div>

<\/div>

<\/div>
Nice to have skills:
<\/div>
- Capability to tune and optimize SIEM rules and detection logic to reduce noise and improve fidelity.
<\/div>
- Strong interpersonal communication skills with the ability to explain complex topics to non -technical audiences.
<\/div>
- Experience working as a team member on projects to improve business needs.
<\/div>
- Experience supporting endpoint, network, and cloud -based security controls in large -scale environments.
<\/div>
- Demonstrated ability to adapt to emerging threats, technologies, and evolving operational needs.
<\/div>

<\/div>

<\/div>
Project Details: Under the general supervision of the GRC Manager, this position serves as a Security Analyst responsible for supporting a wide range of compliance and cybersecurity functions across the Wisconsin Department of Correction (DOC). Core responsibilities include providing risk assessment and/or compliance support. Taking part in or leading audits, submitting findings, analyzing risks for specific areas, monitoring corrective actions, and drafting risk reports with metric charts and ongoing effort accountability. This position assesses, documents, and provides guidance to other IT staff and non -IT areas on how to align IT operational and technology processes based on information technology risk assessments and/or with regulatory compliance/audit functions. This position will also provide support in detecting, analyzing, and responding to cybersecurity threats, participating in forensic investigations, and contributing to ongoing vulnerability management efforts. The role may also include supporting cloud security initiatives, assisting with tabletop exercises, and developing security response procedures.
<\/div>

<\/div><\/span>

About the Company

Novalink Solutions

Novalink, founded in 2003 , is a leading consulting and staffing company serving clients in public and private sectors in Information Technology, Telecommunications (IT/Telecom), Technical Networks, Finance, and Administration. With government agencies as our primary clientele, our team has a proven track record of success in providing temporary personnel solutions and managing government deliverables-based projects over the past 20 years.

COMPANY SIZE

20 to 49 employees

INDUSTRY

Staffing/Employment Agencies

FOUNDED

2004

WEBSITE

http://www.novalink-solutions.com/

Resume Resources

Free Resume Templates Free Resume Builder