SOC Analyst Journeyman

Assists in ensuring the security of the DHMS program's information systems, networks, and data through monitoring, detecting, investigating, analyzing, and responding to cybersecurity incidents and implementing protective measures. Works closely with IT, operations, compliance, and risk management teams to comply with DHMS IT cybersecurity requirements, policies, and best practices. Possesses fundamental understanding of cybersecurity principles and training or experience in security tools (e.g., firewalls, IDS/IPS), conducting security assessments, developing and implementing mitigation strategies, and incident response. Capable of developing documentation and knowledge of data security best practices. Must have good problem-solving, analytical, communication, and interpersonal skills and the ability to manage multiple tasks effectively. Demonstrates attention to detail, organizational skills, and ability to work independently and as part of a team.

• Monitor, detect, investigate, analyze, and respond to cybersecurity incidents affecting DHMS program information systems, networks, and data
• Implement protective measures and mitigation strategies
• Collaborate with IT, operations, compliance, and risk management teams to ensure compliance with DHMS IT cybersecurity requirements, policies, and best practices
• Conduct security assessments using tools such as firewalls and IDS/IPS
• Develop documentation supporting data security best practices
• Support application and server security activities, including identifying and mitigating web application vulnerabilities (e.g., OWASP Top 10), encryption/hashing practices, and static code analysis
• Apply knowledge of identity/access management (SSO, RBAC) and secure operating environment practices (Unix/Linux) as applicable to DHMS systems

• Associate's Degree
• 3-5 years of experience in cybersecurity/information security operations
• Fundamental understanding of cybersecurity principles and training/experience with security tools (firewalls, IDS/IPS)
• Experience conducting security assessments and implementing mitigation strategies
• Strong problem-solving, analytical, communication, and interpersonal skills
• Ability to manage multiple tasks effectively
• Attention to detail, organizational skills, and ability to work independently and as part of a team

• Familiarity with the DHMS program IT environment and cybersecurity requirements
• Experience with incident response processes and documentation development
• Knowledge of web application security best practices (OWASP Top 10) and secure/static code analysis

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.