Security Analyst - ConsultantThis is a hands-on technical role reporting to the Office of Cybersecurity SOC lead. The analyst will support SCDHHS leadership, business units, partners, and vendors in day-to-day cybersecurity operations.Security Program ExperienceStrongly desired experience includes:CMS ARC-AMPE, HIPAA, NIST or other FISMA RMF frameworksPerforming repeatable security processes supporting compliant enterprise architecturesSupporting security considerations for multi-tenant cloud environments and vendor integrationsTechnical ExperienceCandidates should have hands-on experience with:Secure network design principlesWindows, macOS, and Linux operating systemsSwitching and RoutingEnterprise FirewallsNetwork auditingIDS/IPS platformsNetwork security monitoringSIEM platforms such as QRadar, Splunk (Preferred)Vulnerability scanning tools (Nessus, Qualys, etc.)Cloud Infrastructure Security (Preferred)Essential ResponsibilitiesAssist in maturing network security and compliance solutionsInvestigate and respond to daily network alertsPerform network security assessments for proposed firewall and infrastructure changesConduct technical analysis for network security planning and engineeringReview and assessment of connectivity, website block and firewall rule requests to ensure they do not present an elevated risk to the agencyAnalyze on-premise and cloud networks for potential threatsDevelop, review, and analyze network traffic reports that violate the agency’s approved standards governing Ports, Protocols and Services.Monitor emerging threat vectors and recommend countermeasuresCollaborate with other areas of the agency to implement security controlsSupport cloud and on-premise network changes and enhancement projectsEnsure compliance with ARC-AMPE, HIPAA and SCDIS-200Assist with KPI creation and trend report monitoringParticipate in firewall configuration reviews and ruleset recertificationProvide guidance on best practices to technical teamsPerform additional SOC duties as assignedRequired Skills (rank in order of Importance)Approximately 3-5 years of hands-on experience in network design, implementation, or supportHand-on experience in IT security or system administrationWorking knowledge of secure network design, security architecture, compliance tools, data protection, and access modelsAbility to analyze logs, alerts, and network telemetry.Proficiency with Microsoft Office toolsPreferred Skills (rank in order of Importance)Experience working in regulatory environmentsExperience supporting health IT or state government.Familiarity with FISMA, NIST, CMS ARC-AMPE, and HIPAA security and privacy standardsCloud network security controls (Azure or AWS).