Security Analyst 2

The State of Wisconsin DFI is looking for a Hybrid Security Analyst II.

*MUST BE CURRENT WISCONSIN RESIDENT***

NO RELOCATION

Top Required Skills & Years of Experience (4 to 7 years):

• IT Security

• CrowdStrike administration – expert knowledge

• Tenable administration – expert knowledge

• Strong attention to detail

• Excellent communication skills (written and verbal)

Nice to Have Skills:

• CISSP or equivalent – 1 year

Onsite or Remote? Candidates must be CURRENT WI residents. Those local to the Madison area are strongly preferred. No relocation allowed. After a trial period, this position may be eligible for remote work up to three days per week.

Position Description:

Under the general guidance of the IT Strategy and Governance Officer, this position is responsible

for growing and operating the agency IT Security Program at Wisconsin Department of Financial

Institutions (DFI). The Security Analyst II is expected to be familiar with a wide variety of IT security

concepts, practices, and technologies. The position serves as an expert resource and relies on

extensive experience and judgment to plan and accomplish goals. This includes providing advanced

analysis to manage the security design, implementation, monitoring, and incident response related

to networks, servers, storage, applications, databases, and endpoints. The position will lead

projects to implement new security controls and technologies. The position will also assist with the

creation of policies, procedures, standards, and guidelines. This position may lead and direct the

work of others. A wide degree of creativity and latitude is expected.

Required Skills:

• IT Security – 4 to 7 years

• CrowdStrike administration – expert knowledge

• Tenable administration – expert knowledge

• Strong attention to detail

• Excellent communication skills (written and verbal)

Preferred:

• CISSP or equivalent – 1 year

Regular duties may include the following representative tasks:

• Administer CrowdStrike, Tenable, Zscaler

• Perform IT security risk assessments. Develop, recommend, and implement remediation

strategies.

• Research vendor offerings and conduct proof of concepts.

• Coordinate with other teams to implement new technologies and remediate issues.

• Monitor asset inventory, installed agents, and status of devices.

• Review vulnerability dashboards and organizational impact of changing threat landscape.

• Monitor data inventories, policy violations. Produce reports and metrics.

• Author policies, procedures, standards, and guidelines related to IT security and compliance.

• Monitor and process incident response queues.

• Manage endpoint firewall operation and adjust as necessary.

• Work independently as well as within a team environment

Additional details: The selected hire is expected to cover parking costs, or work out a reimbursement agreement with their supplier. There is some free street parking in the vicinity, or else paid onsite daily parking.