IT Security Analyst III

Salary: $92,885.00 - $116,099.00 Annually
Location : Richland County, SC
Job Type: FTE - Full-Time
Job Number: 173680
Agency: Judicial Branch
Division: Information Technology
Opening Date: 02/28/2025
Closing Date: Continuous
Class Code:: IT1042
Position Number:: 60003265
Normal Work Schedule:: Monday - Friday (8:30 - 5:00)
Pay Band: Unclassified
Opening Date: 02/28/2025
EEO Statement: Equal Opportunity Employer
Agency Specific Application Procedures:: Interested persons meeting the required qualifications may submit an application at www.careers.sc.gov. All questions on the application must be completed and should include all work history and education. A resume may be included but will not be accepted or reviewed in lieu of an incomplete application. Supplemental questions are considered a part of your application and must be completed.
Veteran Preference Statement: South Carolina is making our Veterans a priority for employment in state agencies and institutions.

Job Responsibilities

Under limited supervision, is responsible for technical aspects of information security within the South Carolina Judicial Branch (SCJB), as well as for implementation of industry standard security controls that are applied consistently throughout our organization. Reports to and works closely with the Security Architect in the implementation of technical controls to safeguard the electronic data, communications, and physical and intangible assets within SCJB.
ESSENTIAL DUTIES AND RESPONSIBILITIES OF THE POSITION

This job bulletin represents general duties for this position and is not intended to be construed as exclusive or all-inclusive. Other duties may be required and assigned.

• Physical, virtual, & web application Firewall management. Applies technical analysis of data security information and uses critical thinking and troubleshooting skills to resolve security incidents, as reported either by end users, other IT teams, or as evident from routine log analysis. Modifies firewall security rules to accommodate changing network environment while maintaining best practices in security. Manage VPN technology used by IT department and vendors. Performs hardware & software upgrades to existing firewall devices and installs new firewall devices as needed for growth.
• Endpoint Security management. Uses SCJB-approved software on all SCJB workstations (local & remote) and Servers to analyze suspicious data traffic, such as, but not limited to, browsing malicious websites or downloading malicious files. Acts on automatically generated reports to follow up on suspicious activity, running security scans or collaborating with the IT Help Desk for additional scans and user assistance as needed. Assist supervisor in running internet usage reports as requested by management to monitor appropriate usage of SCJB resources.
• Email Security monitoring. Receives, investigates, and sends alerts upon reports of suspicious email by end users or email filtering system. Updates email filtering system as needed to prevent ingress of malicious email.
• Two Factor Authentication management. Monitors and maintains health of the two factor authentication system for SCJB user accounts, to prevent unauthorized remote access to SCJB systems. Responds to escalations from IT Help Desk concerning any issues with system, such as access failures.
• Physical Security system monitoring. Collaborates with Security Coordinator in HR, BPS officers, and General Services to troubleshoot technical issues with building access control and video system, utilizing contracted vendor for hands-on support. Coordinate changes, maintenance, and installation of new systems with affected personnel.
• Logging & Security Monitoring. Uses internal enterprise logging system to investigate security issues and anomalies. Integrate new log sources, both on-prem and cloud, and maintain health of logging system. Responds to alerts provided by external security monitoring vendor, creating security incidents as needed to remediate any issues.
• Security Awareness coordination. Assists with the setup and maintenance of our security awareness training portal. Assists with periodic security training assigned to staff, and works closely with IT Help Desk to investigate and resolve issues. Designs and distributes Phishing Assessments on periodic basis to test employees security awareness.
• Data Encryption. Supports best practices of encrypting sensitive data over Email by management of Email DLP system. Works in advisory capacity to Networking to ensure endpoint device encryption adheres to security best practice.
• Research, Test, and Implement new security systems. Will work with the Systems Architect in the design, creation, and testing of new security systems as approved by SCJB. Works closely with other teams as needed to coordinate testing, installation, and communication. Produces documentation on newly-developed security systems that is useful for the average computer user, where such systems require interaction with the user. Conducts vulnerability scans for existing and new systems introduced by IT Development teams or contracted vendors. Works closely with vendors related to all supported security systems.
• Performs other duties as assigned by management in order to meet the needs of the organization.

Minimum and Additional Requirements
MINIMUM QUALIFICATIONS (EDUCATION AND EXPERIENCE)

• Bachelors degree or higher in related area AND 7+ years of combined documented experience in progressively sophisticated roles in networking, information security engineering (including firewall management, endpoint security, email security, identity and access control, security threat analysis);
  
• OR an Associates degree and 10+ years of combined documented experience in progressively sophisticated roles in networking, information security engineering (including firewall management, endpoint security, email security, identity and access control, security threat analysis);
  
• Must hold two (2) or more industry standard security certifications, such as: CompTIA Security +, SANS/GIAC GISF, GSEC, CISSP.
  
• Strong, diverse technical background in networking and troubleshooting.

REQUIRED KNOWLEDGE, SKILLS, ABILITIES AND OTHER CHARACTERISTICS

Skilled in:

• Experience with a vulnerability scanner such as Tenable, Nmap, and Qualys. Hands-on experience with network packet analyzers such as Wireshark.
  
• Experience with Active Directory, NTFS permissions, LDAP, and RADIUS solutions. Familiarity with Linux-based operating systems. Experience with system hardening procedures for Windows, Linux and Unix OS.
  
• Experience with advising on patch management best practice to mitigate vulnerabilities.

Knowledge of:

• Security operations experience with firewalls, IDS/IPS, log monitoring, SIEM platforms, and related operating systems.
  
• Knowledge of Cisco and Checkpoint networking and security technology.

Ability to:

• Fluent in understanding and working with TCP/IP protocol and networking principles such as switching and routing, as well as web technologies.
  
• Ability to work in a team environment and establish effective working relationships with vendors, management, staff and users.
  
• Ability to handle multiple engagements with overlapping deadlines.
  
• Ability to stay current on security issues through research, training, and industry conferences.

Preferred Qualifications

DESIRABLE REQUIREMENTS (EDUCATION AND EXPERIENCE)

• Vendor specific certifications such as Cisco CCNA, Checkpoint CCSA, etc.
• Experience with Cisco Firepower, Check Point version R80 or higher, Linux or UNIX based platforms, Tenable vulnerability scanning, web application firewalls & bot prevention.
• Experience working in Hybrid environment, and with multiple physical or virtual site locations is a plus.
• Experience with Microsoft Cloud security controls, logging, and identity management desired.
• Experience with Zero Trust Network Access technology a plus.

Additional Comments
The South Carolina Judicial Branch offers an exceptional benefits package for FTE positions that include:

• Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children;
• State Retirement Plan and Deferred Compensation Programs (Temporary positions have option to enroll);
• 15 days paid annual (vacation) leave per year;
• 15 days paid sick leave per year;
• Option to designate 10 days of earned paid sick leave per year as family sick leave;
• 13 paid state holidays;
• Six weeks or two weeks of Paid Parental Leave;
• Workers' Compensation Benefits.

EQUAL OPPORTUNITY EMPLOYER

The South Carolina Judicial Branch is an equal opportunity employer and is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, national origin, sex, gender, pregnancy, age, or disability.
Benefits for State Employees
The state of South Carolina offers eligible employees generous benefits, including health and dental insurance; retirement and savings plan options; and paid vacation and sick leave. Plus, work-life balance programs such as telecommuting and flexible work schedules are available to employees of some state agencies.

Insurance Benefits
Eligible employees may enroll in health insurance, which includes prescription coverage and wellness benefits. Other available insurance benefits include dental, vision, term life insurance, long term disability and flexible spending accounts for health and child care expenses.

Retirement Benefits
State employees are also offered retirement plan options, including defined benefit and defined contribution plans. Additionally, eligible employees may elect to participate in the South Carolina Deferred Compensation Program, which is a voluntary, supplemental retirement savings plan offering 401(k) and 457 plan options.

Workplace Benefits
State employees may also be eligible for other benefits, including tuition assistance; holiday, annual and sick leave; and discounts on purchases, travel and more.

Note: The benefits above are available to most state employees, with the exception of those in temporary positions. Employees in temporary grant and time-limited positions may be eligible for all, some or none of these benefits as benefits are associated with each position type. For these positions, contact the hiring agency to determine what benefits may be available.
01

How did you learn about this position?

• NEOGOV
• LINKEDIN
• FACEBOOK
• TWITTER
• INDEED
• INTERNAL JOB POSTING
• SCJB EMPLOYEE
• COLLEGE/UNIVERSITY
• DICE
• OTHER

Required Question