ON-SITE POSITION

Job Description Summary

Responsible for assisting the Director of Information Security and Compliance with protecting Agua Caliente’s information systems and data from cyber-based threats. Actively monitors network activity to prevent and respond to cyberattacks from threat sources seeking to cause damage or steal sensitive information. Performs user access provisioning and de-provisioning for Agua Caliente’s applications and systems. Audits credentials and access requirements regularly.

Essential Duties and Responsibilities (other duties may be assigned)

• Assist with the following functions: monitor, detect, and respond to cyber threats, events, and incidents.
• Review malware alerts on a daily basis and communicate to respective parties to contain and eradicate them.
• Escalate to I.T. management any vulnerable areas to increase security relative to open gaps or deficient processes.
• Support external forensic first responder capabilities if/as needed.
• Ensure all systems operate in accordance with all applicable Tribal regulatory controls and federal standards (PCI, GDPR, CCPA, etc.).
• Perform user administration tasks for Agua Caliente’s applications and systems, such as new user enrollment, access provisioning and de-provisioning and periodic auditing of credentials and access requirements for all departments.
• Review vulnerability assessments used to identify weaknesses and assess the effectiveness of existing controls.
• Assist with audit requests for documentation, responses, and remediation.
• Maintain knowledge of current and emerging vulnerabilities, malware, infiltration techniques, forensics, and threats.
• Work with I.T. team to ensure endpoint security is installed and up to date on all pertinent systems.
• Work on emerging projects to help improve Agua Caliente’s security posture.
• Assist in the enforcement of cybersecurity-based policies and procedures.
• Assist Cyber Security Analyst II in assessing and improving Agua Caliente’s security posture using attack simulation tools.

Supervisory Responsibilities

None

Access to Sensitive Areas and Information

As per the ACGC Access Matrix

Signatory Ability

None

Education, Experience and Skills

• Minimum 1 year of experience in the protection, analysis and support of a technology-based organizational support role as a Cyber Security Analyst, Security Analyst, Security Operations Analyst or a similar security-related area plus an additional 2 years of experience in an IT support related position
• Industry certification (such as CompTIA Security , CySA , or similar) is highly desired.
• Working knowledge of principal cybersecurity-centric technologies and applications such as firewalls, EDR, IDS/IPS, DLP, encryption, anti-malware, networking protocols, Microsoft Windows security events, and similar systems and tools.
• Proficiency with general system log monitoring, correlation, and threat management; SIEM event aggregation, correlation, and analysis is a plus.
• Knowledge of incident response, investigations, and related cybersecurity-based operational processes.
• Understanding of common email-based threats, including phishing and other exploitation techniques combined with the ability to rate emails as malicious/clean and take necessary steps.
• Experience with PC and server hardware utilizing Microsoft Operating Systems (Windows 10 and above, Windows Server 20xx), Microsoft Exchange, and Microsoft Office Suite.
• Experience with processing vulnerability assessments and related information and coordinating and/or conducting essential responses.
• Excellent verbal, written, communication and interpersonal skills.
• Ability to thrive in a fast-paced, highly-matrixed, and rapidly-changing environment.
• Ability to work after normal business hours as needed or required.
• Bachelor’s degree in computer science or information sciences from a four-year college or university; an equivalent combination of education and experience will be considered.

Working Conditions/Physical Demands

To perform this job successfully, the individual must be able to stand, move and work throughout the office area and properties, including walking up to 1 ½ miles, climbing stairs and sitting at a desk/workstation for the duration of the shift.

Typically, the individual will be housed in an office environment. The noise level in the work environment is usually moderate but will escalate when located in the casino environment. Must be able to grasp, bend, lift and/or carry or otherwise move goods weighing a minimum of 25 lbs. on an intermittent basis, and sufficient dexterity of hand in order to use office equipment including, but not limited to a computer keyboard, calculator, general office equipment and multi-line telephone. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.