3 Jobs in Alexandria, VA

SORT BY

SET JOB ALERT

OFF

Details...

Lead Security Analyst

City of Alexandria

Alexandria, VA | Full Time

$141k-167k (estimate)

Just Posted

Information System Security Manager

Revel IT

Alexandria, VA | Full Time

$146k-181k (estimate)

Just Posted

Lead Security Analyst

City of Alexandria, VA

Alexandria, VA | Full Time

$141k-167k (estimate)

4 Days Ago

Lead Security Analyst

City of Alexandria Alexandria, VA

$141k-167k (estimate)

Full Time | Public Administration Just Posted

Save

City of Alexandria is Hiring a Lead Security Analyst Near Alexandria, VA

Lead Security Analyst

About the Department:

The Information Technology Services Department is responsible for enterprise technology operations for the City of Alexandria. ITS provides technology services and solutions to City departments to enhance service delivery. ITS aligns its work with City needs by providing leadership, resources, expertise, and products that enable departments to better serve the City’s residents, businesses, and visitors. ITS resources support initiatives funded through the multi-year Information Technology Capital Improvement Plan (IT/CIP) to improve the overall technology landscape. The City of Alexandria’s ITS Department has been a Top Ten National Finalist in the Digital Cities Award program for over the past 19 years.

An Overview

The Department of Information Technology Services (ITS) is seeking a Lead Security Analyst who will have responsibility for overseeing the City of Alexandria government’s Cybersecurity Program. This position reports directly to the Chief Information Security Officer (CISO) and uses industry best practices to oversee the implementation of all security policies as directed by the CISO, and enforces the City’s enterprise cybersecurity through policy, architecture, technical and functional administration, and training. The Lead Security Analyst will also lead in selecting, configuring, communicating, and implementing cybersecurity solutions and security controls to identify and reduce IT risk. The Lead Security Analyst performs two core functions for the enterprise. The first is the day-to-day operations of the in-place security solutions while the second is the identification, investigation, and resolution of security breaches detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines, and procedures as well as conducting vulnerability audits and assessments. The Lead Security Analyst is expected to be fully aware of the enterprise’s security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals.

What You Should Bring

You should have a demonstrated ability of being able to work independently, as well as a history of establishing and maintaining effective working relationships with coworkers, representatives of other departments and agencies, and the public. You must be able to communicate clearly and effectively, both verbally and in writing, as well as being able to mentor junior staff. You should be able to show proactivity in continuously improving your job knowledge and technical and functional skills through training opportunities and self-study. Our ideal candidate will have considerable hands-on experience in all aspects of cybersecurity, and an ability to lead, manage, and communicate.

The Opportunity

As the Lead Security Analyst your effort will be focused on all aspects of City-wide IT cybersecurity, from developing cybersecurity plans and strategies to preventing and mitigating cyber-attacks. Examples of duties include:

Develop, maintain, and matures risk and compliance reporting and alerting as well as SOC (security operations center) best practices and standard operating procedure documentation.
Improve threat awareness through continuous development and improvement of processes including network vulnerability scanning, security information event management (SIEM) system, Threat detection and response, IT governance risk and control management and assessment, IPS/IDS systems, and other applications.
Working service tickets within defined response time to completion.
Help design, build, process prove and support workflows to the success of defined business goals.
Participate as a respectful, thoughtful, listening and contributing member of committees and projects and working groups.
Provides operational oversight, including project management, for all threat and vulnerability management functions.
Supports the CISO and fellow ITS Security team members in responsibilities including project performance, incident response management, and other functions as needed. Shares in assuming CISO role and responsibility in the absence of the CISO.
Ensuring compliance to City, industry and government regulations, policies, standards and procedures.
Responding to internal and external audits.
Work as an ITS Security team member with various cross-functional and technical teams to ensure effectiveness in measuring and managing risk appropriate for the City of Alexandria risk tolerance.
Provide clear and timely analysis and reporting.
Participate in the planning and design of an enterprise business continuity plan and disaster recovery plan, under the direction of the CISO, where appropriate
Maintain up-to-date detailed knowledge of the cybersecurity industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
Assist in the review, selection, deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).
Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.
Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
Participates in incident response work.
Performing other duties as assigned.

Four-Year College Degree with completion of college courses in computer science or related field; five years of experience as a Computer Programmer Analyst III or Network Engineer II including one year as an Information Security Analyst or Engineer, also to include three years of experience in project and contract management; or any equivalent combination of experience and training which provides the required knowledge, skills and abilities.Recent technical experience within the past five years demonstrating a comprehensive knowledge of information security and risk management and technology (audit compliance, regulatory compliance, business continuity and disaster recovery, vulnerability management, configuration management, web application security, intrusion detection and prevention systems, firewalls, and endpoint security). Recent technical experience within the past five years demonstrating a comprehensive knowledge of security administration in a Windows-based network environment. Recent experience within the past five years demonstrating a comprehensive knowledge of information protection standards, guidelines, and applied procedures (i.e., industry "best practices"). Technical experience within the past 10 years demonstrating a comprehensive knowledge of server administration as applied to network and internet security. Good working knowledge of industry standard security controls, NIST 800-53, SANS 20 controls, CIS 18 Critical Controls, NIST Cybersecurity Framework, ISO 27002 Standard, and PCI-DSS. Experience within the past 10 years demonstrating a comprehensive knowledge of business needs coupled with the ability to establish and maintain a high level of customer trust and confidence in the security team's concern for customers.This position requires the successful completion of pre-employment checks including but not limited to a criminal background and drug screening. This position may be occasionally required to be available after normal working hours to support applications and to respond to the City’s Emergency Operations Center (EOC) when it is activated.

Job Summary

JOB TYPE

Full Time

INDUSTRY

Public Administration

SALARY

$141k-167k (estimate)

POST DATE

06/05/2024

EXPIRATION DATE

08/04/2024

WEBSITE

cityofalexandriala.com

HEADQUARTERS

ALEXANDRIA, LA

SIZE

500 - 1,000

FOUNDED

1832

TYPE

Private

CEO

JACQUES ROY

REVENUE

$50M - $200M

INDUSTRY

Public Administration

Related Companies

Natural Resource Manager

City of Alexandria

Full Time

$131k-173k (estimate)

Just Posted

Boards Commission Unit Manager

City of Alexandria

Full Time

$95k-120k (estimate)

Just Posted

Property inspector

City of Alexandria

Full Time

$59k-80k (estimate)

1 Week Ago

The job skills required for Lead Security Analyst include Information Security, Cybersecurity, Incident Response, Computer Science, Risk Management, SIEM, etc. Having related job skills and expertise will give you an advantage when applying to be a Lead Security Analyst. That makes you unique and can impact how much salary you can get paid. Below are job openings related to skills required by Lead Security Analyst. Select any job title you are interested in and start to search job requirements.

Information Security View Jobs

Cybersecurity View Jobs

Incident Response View Jobs

Computer Science View Jobs

Risk Management View Jobs

SIEM View Jobs

For the skill of Information Security

INFORMATION SECURITY SPECIALIST

US Washington Headquarters Services

Full Time

$114k-137k (estimate)

2 Months Ago

For the skill of Cybersecurity

Information Systems Security Officer

M9 Solutions

Full Time

$115k-138k (estimate)

1 Week Ago

For the skill of Incident Response

Cyber Threat Intelligence Analyst

InQwest Inc.

Full Time

$83k-107k (estimate)

2 Months Ago

The following is the career advancement route for Lead Security Analyst positions, which can be used as a reference in future career path planning. As a Lead Security Analyst, it can be promoted into senior positions as an Information Security Analyst V that are expected to handle more key tasks, people in this role will get a higher salary paid than an ordinary Lead Security Analyst. You can explore the career advancement for a Lead Security Analyst below and select your interested title to get hiring information.