SOC Analyst Journeyman

Assists in ensuring the security of the DHMS program's information systems, networks, and data through monitoring, detecting, investigating, analyzing, and responding to cybersecurity incidents and implementing protective measures. Works closely with IT, operations, compliance, and risk management teams to comply with DHMS IT cybersecurity requirements, policies, and best practices. Possesses fundamental understanding of cybersecurity principles and training or experience in security tools (e.g., firewalls, IDS/IPS), conducting security assessments, developing and implementing mitigation strategies, and incident response. Capable of developing documentation and knowledge of data security best practices. Must have good problem-solving, analytical, communication, and interpersonal skills and the ability to manage multiple tasks effectively. Demonstrates attention to detail, organizational skills, and ability to work independently and as part of a team.

Duties

• Monitor, detect, investigate, analyze, and respond to cybersecurity incidents affecting DHMS program information systems, networks, and data
• Implement protective measures and mitigation strategies
• Collaborate with IT, operations, compliance, and risk management teams to ensure compliance with DHMS IT cybersecurity requirements, policies, and best practices
• Conduct security assessments using tools such as firewalls and IDS/IPS
• Develop documentation supporting data security best practices
• Support application and server security activities, including identifying and mitigating web application vulnerabilities (e.g., OWASP Top 10), encryption/hashing practices, and static code analysis
• Apply knowledge of identity/access management (SSO, RBAC) and secure operating environment practices (Unix/Linux) as applicable to DHMS systems

Required Qualifications

• Associate's Degree
• 3-5 years of experience in cybersecurity/information security operations
• Fundamental understanding of cybersecurity principles and training/experience with security tools (firewalls, IDS/IPS)
• Experience conducting security assessments and implementing mitigation strategies
• Strong problem-solving, analytical, communication, and interpersonal skills
• Ability to manage multiple tasks effectively
• Attention to detail, organizational skills, and ability to work independently and as part of a team

Preferred Qualifications

• Familiarity with the DHMS program IT environment and cybersecurity requirements
• Experience with incident response processes and documentation development
• Knowledge of web application security best practices (OWASP Top 10) and secure/static code analysis