Lead Cyber Security Analyst (Information Security Analyst Iii)

Salary : $87,709.02 - $146,181.36 Annually
Location : FAIRFAX (EJ32), VA
Job Type: FT Salary W BN
Job Number: 23-03307
Department: Information Technology
Opening Date: 11/18/2023
Closing Date: 12/29/2023 11:59 PM Eastern
Pay Grade: S30
Posting Type: Open to General Public
Job Announcement
Serves as a senior expert in the field of Cyber Security and privacy with the Information Security Office, to include assessing cyber threats, responding to cyber incidents, responding to agency inquiries, and implementing and administering Cyber Security tools and systems. Works closely with our cloud engineering and security teams to design, implement, and maintain cloud security solutions for our enterprise. Should have a strong background in cloud security, container and virtual network security, and SIEM technologies.
Duties may include:

1. Implement, administer, and support security systems to include host endpoint protection, data loss prevention, network-based intrusion detection and prevention systems, application layer firewalls, vulnerability management, forensics utilities, and other infrastructure deployed and maintained by the ISO.
2. Design, implement, and maintain cloud security solutions and best practices.
3. Participate in internal and third-party security assessments and audits requiring interaction with agencies to remediate discovered system vulnerabilities.
4. Administer and use a Security Information and Event Management (SIEM) system and other security dashboards to monitor, research, and respond to Cyber Security related events and incidents due to data loss or system breach, malicious code, system configuration, or other issues.
5. Coordinate daily with other Department of Information Technology (DIT) divisions and Agency Information Security Coordinators and IT Analysts, and external entities.
6. Participate in fulfilling data searches to include legal electronic files preservation, Freedom of Information Act (FOIA), other data requests, investigations, and forensics.
7. Act as a general technical and operational advisor for Cyber Security on behalf of the ISO.
8. Stay abreast of current and evolving Cyber Security trends and seek to acquire or maintain industry certifications.
9. Support and respond to emergency IT events and support county emergency operations center activations as needed.
10. Perform other duties as assigned.

Employment Standards
MINIMUM QUALIFICATIONS:
(Click on the aforementioned link to learn how Fairfax County interprets equivalencies for "Any combination, experience, and training equivalent to") Graduation from an accredited four-year college or university with a bachelor's degree in a computer or information science discipline, IT/Cyber Security, network or IT systems administration, engineering; or a bachelor's degree in a business or related field that has been supplemented by at least 24 credit hours of intermediate computer science coursework; plus two years of experience in Information Security systems, network, or Cyber Security work.
NECESSARY SPECIAL REQUIREMENTS:
The appointee to this position will be required to complete a criminal background check to the satisfaction of the employer.
PREFERRED QUALIFICATIONS:
Knowledge and experience with implementing and assessing compliance with information technology and privacy protection regulation and standards such as HIPAA, PCI-DSS, CJIS, VA Code and Federal PII protections, and other institutional technology standards and best practices defined by NIST, ISO 27000 series, OWASP, and SANS Top 20 Security Controls. Understanding and experience with network and security architecture, multiple operating system platforms, databases, web applications, and other evolving mobile and cloud technologies, to include but not limited to the following: malware inspection, traditional and application layer firewalls, VPN, identity management systems, data loss prevention, and network and host-based intrusion detection/prevention systems. Experience with identity management and other access controls.
PHYSICAL REQUIREMENTS:
Work is generally sedentary performed in a normal work environment. All duties performed with or without reasonable accommodations.
SELECTION PROCEDURE:
Panel interview and may include exercise.
The population of Fairfax County is very diverse where 39.8% of residents speak a language other than English at home () and we encourage candidates bilingual in English and a foreign language to apply to this opportunity.
Fairfax County Government prohibits discrimination on the basis of race, color, religion, national origin, sex, pregnancy, childbirth or related medical conditions, age, marital status, disability, sexual orientation, gender identity, genetics, political affiliation, or military status in the recruitment, selection, and hiring of its workforce.
Reasonable accommodations are available to persons with disabilities during application and/or interview processes per the Americans with Disabilities Act. Contact 703-324-4900 for assistance. TTY 703-222-7314. EEO/AA/TTY.
#LI-JT1
Merit Positions
Fairfax County is proud to offer employees an attractive and comprehensive benefits program, including the following:

• Medical/Vision/Dental Insurance Coverage
• Group Term Life Insurance
• Long Term Disability
• LiveWell Program
• Flexible Spending Programs
• Paid Leave (annual, sick, parental, volunteer activity, and more!)
• Paid Holidays
• Contributory Retirement Plan
• Deferred Compensation
• Employee Assistance Program
• Employees' Child Care Center
• Commuter Benefit Program
• Continuous Learning Opportunities

NOTE: Fairfax County Government is a qualifying employer under the Public Service Loan Forgiveness program. For more information about the PSLF program: https://studentaid.gov/manage-loans/forgiveness-cancellation/public-service
For additional details please visit the
Non-Merit Positions

1. Non-Merit Benefit Eligible: scheduled to work a minimum 1,040 hours and no more than a maximum of 1,560 hours in a calendar year.
   • Medical/Vision/Dental Insurance Coverage
   • Flexible Spending Program
   • Deferred Compensation
2. Temporary: scheduled to work a maximum of 900 hours in a calendar year.
   • No benefits

01
What is the highest level of education that you have completed?

• Less than 12th grade
• High school diploma or GED
• Some college
• Associate's degree
• Bachelor's degree
• Master's degree
• Doctorate degree

02
If you answered "Some college" for the highest level of education completed, please indicate the number of quarter or semester hours you have completed towards a degree.

• Less than 45 quarter hours
• 45 to less than 90 quarter hours
• 90 to less than 135 quarter hours
• 135 to less than 180 quarter hours
• 180 or more quarter hours
• Less than 30 semester hours
• 30 to less than 60 semester hours
• 60 to less than 90 semester hours
• 90 to less than 120 semester hours
• 120 or more semester hours
• Not applicable

03
Please indicate the major(s) or minor(s) for your completed degree(s). Check all that apply.

• Computer science
• Information science
• IT/Cyber Security
• Network systems administration
• IT systems administration
• Engineering
• Business administration
• Other (related field)
• Other (non-related field)
• Not applicable

04
If you answered "Other (related field)" or "Other (non-related field)" for the previous question, please list all of your majors and minors. If this question does not pertain to you, or you do not have a degree, enter "Not applicable".
05
Have you completed at least 24 credit hours of intermediate computer science coursework?

• Yes
• No

06
How many years of full-time equivalent professional experience in Information Security systems, network, or Cyber Security work do you possess?

• None
• Less than one year
• One to less than two years
• Two to less than three years
• Three to less than four years
• Four to less than five years
• Five to less than six years
• Six years or more

07
How many years of direct experience administering any systems that support the network security architecture of an enterprise environment do you possess (e.g., firewalls, IDS/IPS, internet filtering/micro-segmentation)?

• None
• Less than one year
• One to less than two years
• Two to less than three years
• Three to less than four years
• Four to less than five years
• Five years or more

08
How many years of direct experience administering the security of cloud or virtual/container resources do you possess (e.g., Azure, AWS, GCP)?

• None
• Less than one year
• One to less than two years
• Two to less than three years
• Three to less than four years
• Four to less than five years
• Five years or more

09
How many years of direct experience using forensic tools, endpoint protection tools, or other resources such as a SIEM to investigate cyber incidents in an enterprise do you possess?

• None
• Less than one year
• One to less than two years
• Two to less than three years
• Three to less than four years
• Four to less than five years
• Five years or more

10
How many years of direct experience implementing security controls to ensure compliance with protection standards (e.g., HIPAA, PCI-DSS, or other relevant regulation) do you possess?

• None
• Less than one year
• One to less than two years
• Two to less than three years
• Three to less than four years
• Four to less than five years
• Five years or more

Required Question