Cyber Security Analyst II- F/T

ON-SITE POSITION

Job Description Summary

Responsible for assisting the Director of Information Security and Compliance with protecting Agua Caliente’s information systems and data from cyber-based threats. Actively develops and executes operational processes, procedures, and protocols to prevent and respond to cyberattacks from threat sources seeking to cause damage or steal sensitive information. Establish & implement security best practices & policies. Mentors Cyber Security Analyst I.

Essential Duties and Responsibilities (other duties may be assigned)

• Monitor, detect, respond to and document cyber threats, events, and incidents as well as validate, assess and mature various operational processes.
• Review malware alerts on a daily basis and communicate to respective parties to contain and eradicate them.
• Escalate to I.T. management any vulnerable areas and solutions to increase security relative to open gaps or deficient processes.
• Support external forensic first responder capabilities if/as needed.
• Ensure all systems operate in accordance with all applicable Tribal regulatory controls and federal standards (PCI, GDPR, CCPA, etc.).
• Perform periodic audits of credentials and access requirements for all departments.
• Participate in vulnerability detection and associated remediation efforts.
• Perform and review vulnerability assessments to identify weaknesses and assess the effectiveness of existing controls. 
• Identify and define security requirements for operating systems and applications.
• Analyze firewall, network, and SIEM rules to provide recommendations for security improvements.
• Assist with audit requests for documentation, responses, and remediation.
• Maintain knowledge of current and emerging vulnerabilities, malware, infiltration techniques, forensics, and threats.
• Work with I.T. security team to ensure endpoint security is installed and up to date on all pertinent systems.
• Work on emerging projects to help improve Agua Caliente’s security posture.
• Participate in the creation, enforcement, and consistent update of cybersecurity-based documentation such as policies, procedures, guidelines, incident response and disaster recovery plans.
• Assess and improve Agua Caliente’s security posture using attack simulation tools.
• Backup Cyber Security Analyst I as required

Supervisory Responsibilities

None

Access to Sensitive Areas and Information

As per the ACGC Access Matrix

Signatory Ability

Education and/or Experience

• Minimum 2 years of experience in the protection, analysis and support of a technology-based organizational support role as a Cyber Security Analyst, Security Analyst, Security Operations Analyst or a similar security-related area plus an additional 2 years of experience in an IT support related position
• Industry certification (such as CompTIA Security+, CySA+, or similar) is highly desired.
• Working knowledge of principal cybersecurity-centric technologies and applications such as firewalls, EDR, IDS/IPS, DLP, encryption, anti-malware, networking protocols, Microsoft Windows security events, and similar systems and tools.
• Proficiency with general system log monitoring, correlation, and threat management; SIEM event aggregation, correlation, and analysis is a plus.
• Knowledge of incident response, investigations, and related cybersecurity-based operational processes.
• Understanding of common email-based threats, including phishing and other exploitation techniques combined with the ability to rate emails as malicious/clean and take necessary steps.
• Experience with PC and server hardware utilizing Microsoft Operating Systems (Windows 10 and above, Windows Server 20xx), Microsoft Exchange, and Microsoft Office Suite.
• Experience with processing vulnerability assessments and related information and coordinating and/or conducting essential responses.
• Excellent verbal, written, communication and interpersonal skills.
• Ability to thrive in a fast-paced, highly-matrixed, and rapidly-changing environment.
• Ability to work after normal business hours as needed or required.
• Bachelor’s degree in computer science or information sciences from a four-year college or university, an equivalent combination of education and experience will be considered.

Working Conditions/Physical Demands

To perform this job successfully, the individual must be able to stand, move and work throughout the office area and properties, including walking up to 1 ½ miles, climbing stairs and sitting at a desk/workstation for the duration of the shift.

Typically, the individual will be housed in an office environment.  The noise level in the work environment is usually moderate but will escalate when located in the casino environment.  Must be able to grasp, bend, lift and/or carry or otherwise move goods weighing a minimum of 25 lbs. on an intermittent basis, and sufficient dexterity of hand in order to use office equipment including, but not limited to a computer keyboard, calculator, general office equipment and multi-line telephone. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.