M365 Security Analyst
19531
Chandler, AZ
9/16/2024 3:58:00 PM
IT Security
Contractor - W2

Job Description
Day to day responsibilities:
MS 365 security engineering and working with other IT teams, such as Infrastructure, Service Desk, etc., pushing out security for M365 modules.
Triage incidents
Write workflows
May help with risk assessments

Other Essential Functions:
Monitors alerts and responds to security events by investigating, correlating, triaging and escalating security events.
Assists with maintaining information security processes, products and systems to mitigate cyber and technology-related risks.
Assists with performing technology system security audits and risk assessments.
Keeps abreast of latest threats and takes appropriate threat mitigation action (i.e., anti-phishing campaigns, metrics, and communications); recommends and establishes industry best practice security standards and ensures compliance with Citywide policies and standards.
Reviews access to information systems and audits role-based access permissions.

Knowledge, Skills & Abilities
Methods of computer/server systems analysis, design, configuration, installation and troubleshooting, network concepts, protocols and topology management.
Intermediate to advanced knowledge of standard security tooling such as EDR, vulnerability scanners, firewall and URL filtering, and security log correlators.
Information technology related terminology, creation of standard operating procedures; knowledge of computer control systems and office computer systems integration.
Install, configure and maintain appliances to support current cybersecurity configuration standards, performance notification, traffic monitoring and traffic sniffing; analyze, design and implement computer control logic and strategies; analyze and repair technology security systems software and technology security systems equipment malfunctions.
Application of security principles and practices in order to provide awareness training to city staff; remote support tools and concepts.
Familiarity with mainstream Windows and Linux operating systems, network appliance operating systems, utilities and commands; hardware configurations including storage, networking, infrastructure and general computing technologies; SQL databases and mobile device security issues.
Knowledge of firewall configurations, maintenance and troubleshooting; intrusion detection, intrusion prevention methodology; knowledge of backup/recovery procedures and experience with enterprise backup products.
Database practices and design including security principles and practices; safeguards for building secure systems; perform security risk and vulnerability testing of networks, operating systems and applications and associated databases.
Understand and abide by federal OSHA, state and county regulations and city policies regarding safe work practices.
Ability to gather and organize security tool analytics on a repeatable timeline. Research gathered statistics and present meaningful performance indicators for both technical and business-oriented teams.
Analytical research methods and techniques including the use of and application of statistical methods and practices; compile reports from a wide variety of sources and transmit data; read and create network diagrams and systems deployment schematics; operate a personal computer and related software or programs.
Follow oral and written instructions and communicate technical and non-technical concepts effectively both orally and in writing.
Present a positive public image and maintain effective working relationships with other City employees, outside agencies and the public; maintain a professional demeanor during stressful situations.
May be required to provide on call support during non-business hours including nights and weekends, as needed.

Job Requirements
Must have Enterprise security experience.

** Heavy knowledge of MS O365 Suite - a generalist
** Diagramming & Documentation - Network Architecture - Cisco & Palo Alto
** Incident Handling - CrowdStrike
**Security Operations - EDR, Antivirus, handling Phishing incidents, patching systems
** Firewalls - Cisco & Palo Alto - won't do too much in this area

MUST have a good personality to work with the team, be collaborative, provide value, fit in with the company culture, and be an optimistic, solution oriented self-starter.

** Nice to Have:
Web application security experience.