Applications are submitted online until the position is filled and/or the posting is closed. After reviewing this job announcement, please click on the link at the bottom of the page to apply online. A resume is required with the application. Further instructions on submission of documents are available in the online application. A resume may not be substituted for an application.

The IT Security Analyst II performs two core functions for the enterprise. The first is the day-to-day operations of the in-place security solutions, while the second is the identification, investigation, and resolution of security incidents detected by those systems. Secondary tasks may include involvement in the implementation of new security solutions, participation in the creation and or maintenance of policies, standards, baselines, guidelines, and procedures, as well as conducting vulnerability audits and assessments.

Strategy & Planning

• Participates in the planning and design of enterprise security architecture as well as the enterprise business continuity plan and disaster recovery plan.
• Creates enterprise security policies, standards, baselines, guidelines, and procedures.

Acquisition & Deployment

• Maintains up-to-date detailed knowledge of the IT security industry, including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
• Recommends additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Performs the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.
• Occasionally visit data centers dispersed throughout Allegheny County to install, replace, and/or maintain firewalls as needed.

Operational Management

• Maintains operational configurations of all in-place security solutions.
• Monitors all in-place security solutions for efficient and appropriate operations.
• Reviews alerts from SEIM, IDS, EDR, and other security solutions; Interprets the implications of that activity and devises plans for appropriate resolution.
• Participates in investigations into problematic activity.
• Designs and executes vulnerability assessments, penetration tests, and security audits, and facilitates the resolution of discovered problems.
• Performs other duties as required or assigned.

• PKI, encryption, and authentication protocols.
• IP, TCP/IP, and other network administration protocols.
• Principles & best practices of systems administration.
• Next-gen firewall management is a plus.

• Microsoft Office Products, including Excel.
• Firewall rule management preferred.

• Demonstrate analytical and problem-solving skills.
• Prioritize effectively.
• Communicate effectively orally and in writing.
• Conduct research into IT security issues and products as required.
• Present ideas in business and user-friendly language.
• Be self-motivated and directed with the ability to work both independently and as part of a team.
• Express keen attention to detail.
• Be team-oriented and skilled at working within a collaborative environment.
• Ability to travel within Allegheny County as required.