Senior End Point Security Analyst - Salem, United States - State of Oregon

Description

Initial Posting Date:
05/08/2024

Application Deadline:
05/22/2024

Agency:
Oregon Health Authority

Salary Range:
$7,149 - $10,826

Position Type:
Employee

Position Title:
Senior End Point Security Analyst (Information Systems Specialist 8)

Job Description:

PLEASE NOTE: Resumes, cover letters and all other documents must all be uploaded at one time. When uploading a resume, please upload any other documents in the same area/field.

The job application, resume, and a cover letter are required for this posting and should address the skills in this section clearly. Applications without the required documentation will not move forward in the selection process.

The Office of Information Service's mission is to deliver technology solutions and services that support Oregon Health Authority in helping Oregonians achieve health, well-being, and independence.

The Oregon Health Authority has a fantastic opportunity for a Senior Endpoint Security Analyst to join an excellent team and work to advance their IT career.

The Oregon Health Authority is committed to:

• Eliminating health inequities in Oregon by 2030
• Becoming an anti-racist organization
• Developing and promoting culturally and linguistically appropriate programs, and
• Developing and retaining a diverse, inclusive, and equitable workforce that represents the diversity, cultures, strengths, and values of the people of Oregon.
• Click here to learn more about OHA's mission, vision and core values.

This is a full-time permanent opportunity for anyone to apply. This is a classified position and is represented by a union.

What you will do

The primary purpose of a Senior Endpoint Security Analyst position is to play a crucial role in an OHA/ODHS IT security program by managing and securing endpoint devices such as desktops, laptops, and tablets. This position combines technical expertise with customer service skills to ensure the protection of an agency information assets, while also addressing end-users' needs and concerns. Here's how the position functions within the program:

Endpoint Security Management: The Senior Endpoint Security Analyst is responsible for developing, implementing, and maintaining security solutions and policies for endpoint devices. The role focuses on enhancing security by implementing best practices, policies, and controls. The Senior Endpoint Security Analyst ensures that systems are configured to meet security requirements, including adherence to CIS benchmarks and industry standards.

Incident Response: In the event of security incidents or breaches, the Senior Endpoint Security Analyst plays a critical role in responding to and mitigating the impact on endpoint devices. This involves investigating incidents, identifying compromised endpoints, and taking remedial actions to contain and eradicate threats.

Vulnerability Management: The position is responsible for identifying and remediating vulnerabilities on endpoint devices, ensuring that all software and hardware are up to date with the latest security patches.

Policy Compliance: The Senior Endpoint Security Analyst enforces security policies and ensures that endpoint devices follow these policies.

Security Monitoring and Alerting: Continuously monitoring endpoint devices for suspicious activity, unauthorized access, or potential security breaches is a vital aspect of the role. The Senior Endpoint Security Analyst responds to security alerts, conducts investigations, and escalates incidents as necessary.

Administration and Architecture: This position is responsible for designing, maintaining, and supporting agency-wide systems. The systems include but are not limited to Microsoft Endpoint Manager (Microsoft MEM), Microsoft Defender Microsoft Active Directory, Microsoft Bitlocker Administration and Monitoring, and Endpoint Security.

Documenting and Reporting: Accurate and up-to-date documentation is essential in IT security. The Senior Endpoint Security Analyst maintains records of security incidents, vulnerabilities, and remediation efforts. They also generate reports to provide insights to management and demonstrate compliance with security standards and regulations.

Collaboration and Communication: The role involves working closely with other IT security professionals, OIS teams, and departments across the agencies to ensure alignment with security policies and initiatives.

Continuous Improvement: The Senior Endpoint Security Analyst actively seeks ways to improve endpoint security and customer service processes. They stay up to date with the latest security threats and technologies to enhance the agency's security posture.

What's in it for you?

• Medical, vision, and dental benefits
• 11 paid holidays
• 8 hours of vacation per month
• 8 hours of sick leave per month, eligible to be used as accrued.
• 24 hours of personal business leave per fiscal year, eligible to be used after 6 months of service.
• Pension and retirement programs
• Opportunity to potentially receive loan forgiveness under the Public Service Loan Forgiveness Program (PSLF)
• Continuous growth and development opportunities
• Opportunities to serve your community and make an impact through meaningful work.
• A healthy work/life balance, including fulltime remote options as well.

What we are looking for:

MINIMUM QUALIFICATIONS:

(a) Seven (7) years of information systems experience in: managing a complex enterprise level cyber defense/security environment; managing endpoint security systems such as enterprise level antivirus/antimalware protection, system disk encryption, and administrative password protection systems;

OR

(b) An Associate's degree or higher in Computer Science, Information Technology, or related field, OR completion of a two (2) year accredited vocational training program in information technology or related field;

AND

5 years of information systems experience in:

managing a complex enterprise level cyber defense/security environment; managing endpoint security systems such as enterprise level antivirus/antimalware protection, system disk encryption, and administrative password protection systems

OR

(c) A Bachelor's degree in Information Technology, Computer Science, or related field

AND

three (3) years of information systems experience in:

managing a complex enterprise level cyber defense/security environment; managing endpoint security systems such as enterprise level antivirus/antimalware protection, system disk encryption, and administrative password protection systems

OR

(d) Master's degree in Information Technology, Computer Science, or related field

AND

one (1) year of information systems experience in:

managing a complex enterprise level cyber defense/security environment; managing endpoint security systems such as enterprise level antivirus/antimalware protection, system disk encryption, and administrative password protection systems.

Working Conditions

Work is performed primarily in an office environment. The location of this position is in an office, cubicle, and/or an agreed upon remote work environment and requires the ability to work on multiple tasks simultaneously, sometimes within short time frames. Occasional night and weekend work is required to respond to production problems and systems failures outside regular work hours to ensure the availability and continued operation of ODHS and OHA production systems.

Desired Attributes:


• Knowledge:


• Azure and Active Directory: Deep understanding of Azure Active Directory (Azure AD) and on-premises Active Directory, including user management, group policies, and directory synchronization.


• Microsoft Defender: Proficiency in Microsoft Defender for Endpoint, including knowledge of threat protection, endpoint security, and advanced threat analytics.


• Microsoft Bitlocker Encryption: Understanding of Bitlocker and disk encryption technologies for data protection at rest.


• Intune: In-depth knowledge of Microsoft Intune endpoint security configuration.


• Endpoint Security Solutions: Familiarity with endpoint security software and solutions, including Microsoft Defender and other relevant security tools.


• Operating Systems: Strong knowledge of Windows operating systems and security features.


• Security Frameworks and Standards: Understanding of cybersecurity frameworks, standards, and regulations, such as NIST, CIS, GDPR, HIPAA, and ISO 27001.


• Network Security: Basic knowledge of network security principles, protocols, and technologies, especially in the context of Azure and cloud environments.


• Endpoint Encryption: Knowledge of endpoint encryption methods and data protection at rest and in transit.


• Vulnerability Management: Understanding of vulnerability assessment tools and processes for identifying and mitigating security weaknesses.


• Incident Response: Proficiency in incident response procedures, including containment, eradication, and recovery processes, with a focus on Azure and Microsoft environments.


• Skills:


• Azure AD Management: Skill in managing Azure AD, including user provisioning, single sign-on (SSO), and Azure AD Connect for directory synchronization.


• Microsoft Defender Configuration: Ability to configure, manage, and fine-tune Microsoft Defender for Endpoint to optimize threat detection and response.


• Bitlocker Management: Proficiency in Bitlocker encryption, including configuration, key management, and recovery processes.


• Intune Management: Proficiency in setting up and managing mobile devices, apps, and security policies in Microsoft Intune.


• Endpoint Hardening: Skill in hardening endpoint devices for improved security, including Group Policy management and configuration.


• Security Incident Handling: Capability to respond effectively to security incidents and analyze logs and telemetry data from Azure and Microsoft Defender.


• Security Awareness Training: Skill in developing and delivering security awareness training to end-users, focusing on Microsoft-specific security features.


• Analytical Thinking: Strong analytical skills for assessing security risks and identifying anomalies in endpoint security within Azure and Microsoft environments.


• Documentation and Reporting: Ability to document security incidents, vulnerabilities, and remediation efforts and generate reports for management and compliance purposes.


• Scripting and Automation: Knowledge of scripting and automation tools, such as PowerShell, for automating security tasks and processes in Azure and Microsoft environments.


• Collaboration: Effective communication and collaboration skills to work with cross-functional teams, including IT, helpdesk, and management, while focusing on Microsoft technologies.


• Policy Development: Skill in creating and enforcing security policies and standards specific to Azure, Microsoft Defender, and Intune.


• Forensics: Familiarity with digital forensics tools and methodologies for investigating security incidents in Azure and Microsoft environments.


• Continuous Learning: A commitment to staying up-to-date with the latest Azure and Microsoft security trends, features, and best practices.


• Adaptability: The capacity to adapt to evolving Azure, Microsoft Defender, and Intune technologies and security challenges.


• Vendor and Threat Intelligence: Skill in using Azure and Microsoft-specific threat intelligence feeds and vendor data for proactive security measures.


• Leadership: Leadership skills are essential for guiding security initiatives and fostering a security-conscious culture within Azure and Microsoft environments.

How to Apply

• Complete the online application
• Complete questionnaire
• Attach a resume
• Attach a cover letter of no more than two pages addressing the "What we are looking for?" section including required and preferred skills.

Attention current State of Oregon employees:

To apply for posted positions, please close this window, and log into your Workday account and apply through the career worklet.

To apply as a job rotation/developmental candidate, you must be currently employed by the State of Oregon (this includes regular status employees, who have completed trial service, as well as limited duration employees).

Help Your Application Rise to the Top

Your candidate profile and resume are the perfect opportunity to highlight your interest in the position and showcase the amazing skills and experience, making you the best candidate for the position. Submissions will be screened for consistency of information and communication skills at the professional level (attention to detail, spelling, grammar, etc.).

• This posting closes at 11:59 PM on the close date listed.
• Workday will timeout after 15 minutes of inactivity.
• Workday performs best in Google Chrome.
• You must have a valid email address to apply.
• Check both your email and Workday account for updates regarding this recruitment.
• Please print or save a copy of this announcement. You will not have access to it once the posting closes.

Please ensure you've provided a thorough and updated application as it pertains to the position for which you are applying. If you meet the minimum qualifications for the position, and are the successful candidate, you may qualify for work out of class. For further information, please visit the Pay Equity Project homepage.

Questions/Need Help?

If you need assistance to participate in the application process, including an accommodation request under the American with Disabilities Act contact: Uma Abdullahi at

TTY users please use the Oregon Telecommunications Relay Service: For technical support, please call toll free , for customer service assistance.

Additional Information

• Please monitor your Workday account to view all communication regarding your application. You must have a valid e-mail address to apply.
• Background Check: If you are offered employment, your offer will be contingent upon the positive outcome of an abuse check, criminal records check and driving records check. The information will be shared with the Oregon Health Authority (OHA), Office of Human Resources (OHR). Any criminal or founded abuse history will be reviewed and could result in the withdrawal of the offer or termination of employment.
• Veterans: If you are a veteran, you may receive veteran's preference. Click here for more information about veterans' preference. To receive veterans' preference points, please submit the following required documentation when you apply:
• A copy of your DD214/DD215 form; OR a letter from the US Dept. of Veterans Affairs indicating you receive a non-service-connected pension for the five (5) point preference.
• A copy of your DD214/DD215 form; AND a copy of your veterans' disability preference letter from the Dept. of Veterans Affairs for the ten (10) point preference.
• Visa Sponsorship: We do not offer VISA sponsorships or transfers currently. You will be required to complete the US Department of Homeland Security's I-9 form confirming authorization to work in the United States within three days of hire.
• Please attach only the documents that are related to the position. Additional documents that are attached will not be reviewed.

Affirmative Action and Equal Opportunity

The Oregon Health Authority is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran or disabled status, genetic information, or any other protected class under state or federal law. In addition, we do not discriminate, or screen applicants based on current or past compensation. To learn more about OHA's mission, vision, and core values, click here.

The Oregon Health Authority is an equal opportunity, affirmative action employer committed to workforce diversity.

Agency - OHAAOOIS

More information about the Office of Information Services and current job opportunities can be found at "?