Business/Security Analyst

Job ID: FL-RFQ328-SOW23-131 Remote Security Analyst with VM, bare metal, endpoint/AV/EDR/XDR, Azure Active Directory/MFA, Office 365/SharePoint/Exchange Security, incident analysis, CSI, performance reporting experience Location: Tallahassee, FL DOH Duration: 12 Months 3 References MUST Attachments: Resume Certification/References. CONTRACTOR QUALIFICATIONS AND EXPERIENCE: - 6 years of combined IT and security work experience with infrastructure/network and multi- platform environments including on-premises and cloud environments across IaaS, PaaS, SaaS, VM, bare metal, and other common IT platforms. - 4 years of experience in operations and maintenance of endpoint-related security products (AV, EDR, XDR, drive encryption). - 2 years of experience in operations and maintenance of Azure Active Directory security (events, incidents, login events, MFA). - 2 years of experience in operations and maintenance of Office 365 Security and Compliance (one or all of Exchange online, SharePoint, Teams, OneDrive, Purview). - 2 years of experience working in IT security identifying and assessing risks, developing risk management strategies, and implementing risk mitigation measures. - 2 years of experience working in IT security operations in all stages of the Identify, Protect, Detect, Respond, and Recover lifecycle. - 2 years of experience analyzing and investigating security alerts, events, and logs from various security tools and systems to determine the cause and extent of security breaches. - 2 years of experience designing, implementing, and maintaining management systems to track progress of complex IT projects at an enterprise scale, to completion. - 2 years of experience working with automated IT performance reporting (any tools). - 2 years of experience applying outcomes of incident analysis, risk management, and performance reporting to enable Continual Service Improvement (CSI). CONTRACTOR RESPONSIBILITIES: SERVICE TASKS: Contractor will perform the following tasks in the time and manner specified, at the direction of the Department: Technical Analyst for IT Security Continual Service Improvement: - Perform activities within the Plan, Do, Check, Act lifecycle related to the effectiveness of security controls, as directed by the Department. Service Reviews: - maintain inventories of services and infrastructure utilized by the Security Administration Team and review their applicability to accomplishing team goals, as directed by the Department. Process Evaluations: - in coordination with the IT risk management process, evaluate the effectiveness of services by identifying and analyzing metrics and benchmarks in the interest of the Security Administration Team, as directed by the Department. 6.1.1.4. Initiatives: - define initiatives to improve services and processes based on reviews and evaluations, as directed by the Department. Monitoring: - track initiative effectiveness and assist in troubleshooting and refining changes to security operations, as directed by the Department. Security Analyst for Security Administration Team: - Analyze large amounts of data to identify patterns and potential risks. Use data to make informed decisions and develop mitigation strategies, as directed by the Department. - Perform information security and privacy incident response, as directed by the Department. - Communicate complex technical information to technical and non-technical stakeholders while demonstrating strong written and verbal communication skills, as directed by the Department. - Provide technical expertise to users, management, vendors, and peers for issues involving other Department business offices and vendors, as directed by the Department. - Support and drive continuous service improvement efforts within the risk management process, as directed by the Department.