Security Analyst - IT

Deploy and maintain the comprehensive enterprise security infrastructure. Complete any necessary security reports and audit responses, ensure that the City of Midland complies with all applicable regulations, and participate in Citywide working groups to develop City of Midland security policies, guidelines, best practices, and strategies. The Security Analyst will perform tasks including monitoring, phishing simulation campaigns, vulnerability tracking, incident response, and security awareness training. Upholding policies, standards, controls, and guidelines.

The Security Analyst must be capable of working in a fast-paced environment with sensitive materials; showing initiative, self-motivation, attention to detail, and maintaining strict confidentiality due to the nature of the work.

The items below are intended to describe the general nature and level of work performed by an individual assigned to this position. These are not intended to be an exhaustive list of all responsibilities, duties, and skills required of personnel classified in this position. The position description is subject to change by the City as the needs of the City and requirements of the position change.

· Analyze and maintain City of Midland’s enterprise security infrastructure.

· Recommend solutions, products, and technologies to meet security objectives.

· Actively protect City of Midland’s infrastructure from external and internal threats.

· Ensure City of Midland complies with statutory and regulatory requirements regarding information access, security, and privacy.

· Implement firewall solutions to properly secure City of Midland’s data.

· Recommend security best practices to achieve City of Midland’s business objectives and advise on risk.

· Conduct initial incident analysis to determine scope and impact, gather evidence, and assist in the containment and eradication processes.

· Monitor systems for anomalies and perform routine updates and patching as necessary.

· Evaluate and implement software and hardware upgrades, ensuring optimal security postures.

· Maintain comprehensive system documentation and configuration data for regulatory and audit purposes.

· Performs related duties as assigned.

· Subject to recall 24/7

Knowledge, Abilities, and Skills

· Practical knowledge of network security protocols, hardware, and software.

· Experience in network infrastructure maintenance is preferable.

· Knowledge of enterprise firewalls. Previous experience with Palo Alto Networks Next Generation Firewalls preferred.

· Knowledge of email security solutions. Mimecast preferred.

· Strong analytical and problem-solving skills.

· Effective oral and written communication skills.

· A foundational understanding of networking, communications, and data security.

· Proven ability in incident response and analysis, with a keen eye for detail and a methodical approach to problem-solving.

· Positively interact with other persons at all times.

· Flexible and able to adapt to a rapidly changing environment.

Minimum Education, Experience, and Certification:

· CompTIA Security must be obtained within one year from the hire date.

· ISC2 SSCP is a plus

· Previous experience with Network infrastructure is a plus.

· Previous experience with Firewalls is a plus.

· Bachelor's degree in Information Security, Computer Science, or a related field. Four years' experience may be substituted for the Bachelor's degree requirement.

· Valid Texas Driver's License.