Information Security AnalystStart date: ASAP End date 09/21/2021 Location: Des Moines, IA 50319 (Remote until COVID eases, then on site, must be able to be in person on 1st day to pick up equipment!) Client: State of IA Pay Rate: $48/hr on w2 all inclusive Interviews between August 31st and September 2ndThe Security Analyst is a senior level resource with specialized knowledge and experience in security analysis, forensic investigation, risk identification and remediation. Five years of relevant experience; preferred education 4 year college degree or equivalent technical certification.Responsibilities:Daily review of security logsAbility to use a SIEM products/security dashboards to view and analyze dataAbility to interpret log data to determine riskAbility to plan/facilitate/perform mitigation tasksSecurity Forensics/InvestigationInvestigate security alerts & notifications.Investigate suspicious emailsReview security risk assessments/vulnerability scans/pen test results; and plan/execute remediationAbility to prioritize mitigation tasks identified in risk assessment reportsAbility to prioritize remediation tasks identified in vulnerability scansAbility to plan/facilitate/perform remediation tasksAbility to demonstrate risks or vulnerabilities are remediatedConduct security audits of local network (and remote staff workstations)Password audits (Active Directory)O365 security reviews/complianceOther scans as neededKeep informed on daily security news and vulnerabilitiesAbility to understand how new vulnerabilities may affect SOS environmentPrioritize/Facilitate/Plan remediation of new vulnerabilities that affect SOS environmentAwareness of indicators of compromise for specific known vulnerabilitiesSecurity ControlsReview security controls and analyze possible gaps in SOS environmentComplianceLead oversight for PCI complianceResponsible for annual PCI SAQResponsible for tracking quarterly PCI vulnerability assessmentsOther dutiesWork with leadership, technical staff to plan/execute proactive security plansPoint of contact for SOS in working with firewall vendorKnowledge of the following are a plus:O365 securityMFA configurationEnd point security