Security Operations Center Analyst II

You must have a certification in Comptia Security+, Cybersecurity Analyst (CYSA), Global Information Assurance Certification (GIAC), or GIAC Security Essentials certificate (GSEC) to be considered for this position. Summary Objective The purpose of this position is to monitor, configure, and respond to cyber security events as well as coordinate effective response activities with other cyber security team members, MTS employees, and other personnel within the Security Operations Center (SOC) and Cyber team. This class works under general supervision according to set procedures.

ESSENTIAL FUNCTIONS

The essential functions listed below are those that represent the majority of the time spent working in this class. Management may assign additional functions related to the type of work of the class as necessary. Investigates and responds to alerts in accordance with the SOC Standard Operating Procedures (SOP) and the Metro Incident Response Policy. Uses enterprise security platforms to effectively respond to cyber security events. Provides operational input on SOP documentation and continuously evaluates effectiveness of the documentation to make improvements. Supports the customer support team to resolve customer issues. Participates in cross-functional working groups with other MTS teams to solve complex problems. Provides both business and non-business hour customer support. Documents all remediation actions taken and assesses their impact. Meets regular and punctual attendance standards and any special needs of the position as determined by management, including mandatory overtime and performing related work Performs related work as assigned.

MINIMUM EDUCATION AND EXPERIENCE REQUIREMENTS

Associate degree in Business Administration, Computer Science, Engineering Technology or related discipline. Four (4) years of experience in security, information technology, or a related field with a security focus, or an equivalent combination of the above experience, training, and additional certifications.

OTHER MINIMUM REQUIREMENTS

Must have a certification in Comptia Security+, Cybersecurity Analyst (CYSA), Global Information Assurance Certification (GIAC), or GIAC Security Essentials certificate (GSEC). Must submit to fingerprinting for criminal history check Must provide one's own source of transportation Must possess and maintain a valid state driver's license with an acceptable driving history Must complete annual security awareness training

PHYSICAL DEMANDS

Physical demands refer to the requirements for physical exertion and coordination of limb and body movement. Performs sedentary work that involves walking or standing some of the time and involves exerting up to 10 pounds of force on a regular and recurring basis or sustained keyboard operations.

UNAVOIDABLE HAZARDS

(WORK

ENVIRONMENT

): Unavoidable hazards refer to the job conditions that may lead to injury or health hazards even though precautions have been taken. None.

AMERICANS WITH DISABILITIES ACT COMPLIANCE

Louisville Metro Government is an Equal Opportunity Employer. ADA requires the Louisville Metro Government to provide reasonable accommodations to qualified persons with disabilities. Prospective and current employees are encouraged to discuss ADA accommodations with management.

STANDARD CLAUSES

May be required to work nights, weekends, holidays and emergencies (man-made or natural) to meet the business needs of Louisville Metro Government. This job description is not designed to cover or contain a comprehensive listing of essential functions and responsibilities that are required of an employee for this job. Other duties, responsibilities, and activities may change or be assigned at any time with or without notice.

ESSENTIAL SAFETY FUNCTIONS

It is the responsibility of each employee to comply with established policies, procedures and safe work practices. Each employee must follow safety training and instructions provided by their supervisor. Each employee must also properly wear and maintain all personal protective equipment required for their job. Finally, each employee must immediately report any unsafe work practices or unsafe conditions as well as any on-the-job injury or illnesses. Every manager/supervisor is responsible for enforcing all safety rules and regulations. In addition, they are responsible for ensuring that a safe work environment is maintained, safe work practices are followed and employees are properly trained. EOE