|
Commonwealth of Pennsylvania |
|
|
POSITION DESCRIPTION FOR JOB POSTING |
|
|
Position Number: 00119054 |
Description Activated On: 9/2/2026 1:37:04 PM |
Position Purpose: Describe the primary purpose of this position and how it contributes to the organization’s objectives. Example: Provides clerical and office support within the Division to ensure its operations are conducted efficiently and effectively. This position is part of the EISO Security Systems Engineering team and serves as a Security Analyst responsible for implementing, administering, monitoring, and supporting enterprise cybersecurity technologies. The role includes performing technical and analytical duties related to security platforms, security operations, vulnerability management, data protection, system monitoring, and security engineering processes. The Security Analyst supports technologies such as Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), Data Loss Prevention (DLP), Vulnerability Management, and other enterprise cybersecurity tools. The incumbent collaborates closely with Security Systems Engineering staff, EISO cybersecurity teams, delivery centers, agency security personnel, infrastructure and application teams, and technology vendors to identify risks, resolve technical issues, support security technology deployments, and maintain the effectiveness of enterprise security controls. |
|
Description of Duties: Describe in detail the duties and responsibilities assigned to this position. Descriptions should include the major end result of the task. Example: Types correspondence, reports, and other various documents from handwritten drafts for review and signature of the supervisor. Leads technical and security analysis using enterprise cybersecurity technologies, advanced dashboards, intelligence sources, audit data, and system wide security indicators. Develops, implements, and administers enterprise EDR, SIEM, DLP, Vulnerability Management, and related cybersecurity platforms, ensuring alignment with Commonwealth security policies, standards, and architectural requirements. Reviews and interprets complex security alerts, audit logs, system reports, and threat intelligence to identify emerging threats, systemic vulnerabilities, architectural deficiencies, and broad security risks requiring action. Assists with the investigation and troubleshooting of security technology issues and escalates complex problems to security engineers, vendors, or other appropriate technical resources. Supports endpoint security activities, including EDR deployment, system coverage validation, policy implementation, configuration verification, troubleshooting, and reporting. Performs vulnerability management activities, including reviewing vulnerability scan results, analyzing findings, identifying affected systems, tracking remediation activities, validating remediation, and preparing vulnerability reports. Assists with SIEM operations, including log source onboarding, log and data validation, identification of missing or incomplete security telemetry, troubleshooting, and documentation. Supports DLP and data protection activities, including policy implementation, event review, testing, reporting, troubleshooting, and analysis of potential data protection issues. Assists with the onboarding and integration of Commonwealth systems, applications, endpoints, infrastructure, cloud services, and other technology resources into enterprise security platforms. Performs security platform user administration, including processing authorized access requests, maintaining accounts and roles, reviewing permissions, and supporting appropriate access controls. Analyzes security platform coverage and configuration information to identify systems or technology assets that are not appropriately protected by required enterprise security controls. Coordinates with delivery centers, agency security teams, system administrators, infrastructure teams, application teams, and other technical personnel to investigate and resolve security-related issues. Tracks identified vulnerabilities, security deficiencies, technical issues, remediation activities, and other assigned work through established EISO processes and systems. Supports the testing and validation of security platform upgrades, configuration changes, new functionality, integrations, and technical improvements. Assists with security technology assessments, product evaluations, proofs of concept, and implementation activities. Develops and maintains technical documentation, operating procedures, system information, configuration records, inventories, knowledge articles, and other Security Systems Engineering documentation. Collects and maintains technical evidence and documentation to support security assessments, audits, compliance reviews, risk management activities, and other EISO requirements. Develops security reports, metrics, dashboards, and status information related to vulnerabilities, system coverage, security platform operations, remediation activities, and other cybersecurity functions. Identifies recurring technical issues, process deficiencies, and opportunities to improve or automate Security Systems Engineering processes. Supports vendor technical support activities by gathering diagnostic information, opening and tracking support cases, testing recommended solutions, and documenting resolutions. Applies established Commonwealth and EISO cybersecurity policies, standards, procedures, architecture requirements, and security engineering practices when performing assigned responsibilities. Provides technical assistance to Commonwealth agencies and delivery centers regarding enterprise security technologies, established procedures, and security requirements. Maintains knowledge of cybersecurity threats, vulnerabilities, security technologies, and industry practices relevant to assigned responsibilities. Travel as required, including overnight stays. Performs other duties as assigned. |
Decision Making: Describe the types of decisions made by the incumbent of this position and the types of decisions referred to others. Identify the problems or issues that can be resolved at the level of this position, versus those that must be referred to the supervisor. Example: In response to a customer inquiry, this work involves researching the status of an activity and preparing a formal response for the supervisor’s signature. The Security Analyst serves as an operational and analytical resource within the EISO Security Systems Engineering team and supports security engineers and leadership by performing daily analysis, administration, monitoring, troubleshooting, documentation, and coordination of enterprise cybersecurity technologies. In this role, the analyst applies established security standards and technical procedures to guide decision making and ensure consistent, effective security operations. The position evaluates security and system information, identifies potential risks or deficiencies, and communicates these findings to support informed technical and strategic decisions. The analyst also assists with resolving security technology issues, helping leadership determine appropriate corrective actions. Through these responsibilities, the Security Analyst contributes to the Commonwealth’s ability to maintain secure, reliable, and well managed enterprise security technologies. The position ensures these technologies remain effectively deployed, properly configured, and fully operational. Ultimately, the analyst’s work supports threat detection, vulnerability management, data protection, security monitoring, and compliance across Commonwealth agencies. |
||||||||||||||||||||
Requirements Profile: Identify any specific experience or requirements, such as a licensure, registration, or certification, which may be necessary to perform the functions of the position. Position-specific requirements should be consistent with a Special Requirement or other criteria identified in the classification specification covering this position. Example: Experience using Java; Professional Engineer License Experience: Licenses, registrations, or certifications: 1. N/A 2. N/A 3. N/A 4. 5. 6. |
||||||||||||||||||||
Essential Functions: Provide a list of essential functions for this position. Example: Transports boxes weighing up to 60 pounds.
|