Looking for Sr. Information Security Analyst - Nashville, TN

Senior Information Security AnalystLocation: Nashville, TNDuration: 12+ Months Candidate Must Be LocalClient is seeking a Senior Information Security Analyst to join our team. This individual will act as the “front line defense” by ensuring that security alerts are reviewed, remediated, or escalated with appropriate urgency and all response actions are documented accurately. This is a fundamental role in protecting the information assets of the organization by effectively identifying and responding to potential indicators of compromise or attack. This role will focus on TDOT’s ITS (Intelligent Transportation Systems) network and our 4 TMCs (Traffic Management Centers) across the state.Responsibilities and DutiesEnforce policy, guidance, and training requirements according to Best Business Practices BBPsEnsure implementation of system updates, reporting, and compliance proceduresEnsure users meet the requisite favorable security investigations, clearances, authorization, need-to-know, and security responsibilities before granting access to the TMC informationEnsure users receive initial and annual Cyber Security Awareness training, as well as troubleshoot issues and repair systemsEnsure log files and audits are maintained and reviewed for all systems and that authentication (for example, password) policies are audited for compliancePrepare, distribute, and maintain security plansReview and evaluate the effects on security of system changesEnsure that all Systems within their area of responsibility are certified, accredited, and reaccreditedEnsure system recovery processes are monitored and that security features and procedures are properly restoredMaintain current software inventory and ensure security related documentation is current and accessible to properly authorized individualsMonitor alerts, detections, or other indicators of compromise/attack from a variety of information security solutions.Investigate, contain, eradicate, and/or escalate security detections as appropriateDocument and generate reports of detections and response actions for review by management and other stakeholdersAssist in the analysis of vulnerabilitiesMonitor security platforms’ health for errors, misconfigurations, or performance alertsLeverage SIEM platform by creating and executing search queries, dashboards, and alerts to identify threats and assist in investigations.Support end-users and other stakeholders’ requests related to information security servicePerform control testing and other risk management activitiesProvide information in response to assessments and auditsMaintain an understanding of the systems, solutions, and technologies deployed on the ITS network.Qualifications and SkillsExperience in Information Security and/or Information Technology in an operations or support rolePrior experience in an information security incident response role.

Experience troubleshooting and/or securing computer systems and networksExperience with SIEM platformsExperience reviewing logs, scripting tasks, or creating structured queries/regex searchesFamiliarity with Cisco security products and operational practicesAwareness of Information Security best practices and regulatory requirementsBachelor’s degree in Computer Science, IS or Information Security a plus CISSP, CISM, GIAC and/or similar certifications a plusStrong professional communication skills, both verbal and writtenStrong understanding of computer systems and networking principlesStrong analytical skills and strong knowledge of data analysis toolsAbility to parse logs, create queries, and perform root cause analysis of eventsProgramming/Scripting skills are a plusUnderstanding of logical security, user access and identity managementDetail oriented and process focused with a strong appreciation of completeness and accuracyAbility to independently prioritize work and complete assignments with minimal oversightTeam player who is energized by problem solving and finding solutions together to deliver maximum benefit.Ability to adjust communication style/content to interact with IT and business professionals.