IT Security Analyst 3

Responsibilities: Reviews, validates and documents security procedures, standard operating procedures for undocumented incidents, and lessons learned. Reviews security incidents for actual or potential breaches or non-compliances and ensures that all identified events are promptly and thoroughly investigated, as needed. Reviews metrics on the performance of security responsibilities, controls, and design. Develops new reports for management based on those collected metrics across multiple agencies: conducts trend analysis. Serves as an Incident response specialist for cyber event detection, correlation, response, and recovery. Operates Incident Response tools and determines configuration for tools that are used to collect and analyze data to meet program reporting and evaluation requirements. Incident data includes incident tickets serviced, requests sent through to the IR team, IR actions, and the results of IR investigations. Coordinates security responses and root-cause for all cyber security related events for the State of Michigan. Analyzes / Provides recommendations to management and executives on trending threats and how security can be improved on a State-wide basis as well as provide routine updates to management on the progress and status of active events. Interfaces with other agencies to assist and make recommendations on how to improve the security posture and reduce the number of security related events. May be part of an on-call rotation with potential for weekend/afterhours work. Escalates as necessary. Other duties as assigned.