Tennessee Department of State

Division of Information Technology

Mission: The mission of the Office of the Secretary of State is to exceed the expectations of our customers, the taxpayers, by operating at the highest levels of accuracy, cost-effectiveness, and accountability in a customer-centered environment.

Supervisor: Cloud Security Engineer

Summary: Assists with information security risk management program in our Azure and AWS environments. Will work closely and collaborate with the State cyber team. Additionally identify, evaluate, and report on regulatory, IT, and cybersecurity risks to information assets while supporting and advancing business objectives. This position will need to have an understanding of both internal and external business environments to ensure our information systems are maintained in a fully secure manner in line with our compliance obligations. This position will further the understanding that securing of information assets and associated technology, applications, systems, and processes in the wider ecosystem in which the organization operates is as important as protecting information within the organization's perimeter.

This role assists with complex security design, development, and implementation activities aligned with several technologies including, but not limited to Active Directory, Cloudflare, Windows security, Azure, and AWS implementations.

Duties/Responsibilities

Ensure authentication systems align to the Information Technology policies, standards, and the industry best practices
Help design, deployment, and maintenance of enterprise Azure / AWS cyber security elements.
Continually review and recommend improvements to operational processes and procedures.
Triage incidents and follow standard change management practices while executing configuration changes.
Continuously monitor cloud infrastructure and respond to security incidents
Follow DevSecOps methodologies by automating security as much as possible.
Understanding of cloud service architecture with emphasis on security in the cloud.
Vulnerability scoring frameworks
Implement information security standards & Cloud Compliance requirements
Logging and monitoring cloud infrastructure and identifying security threats
Knowledge of AWS Linux and Azure Windows.
Document security breaches and assess the damage they cause.
Help develop and maintain IT policies.
Responsible for identifying and responding to security incidents.
Responsible for auditing the organization’s IT systems to ensure compliance with security policies and regulations.
Responsible for testing the organization’s security systems to identify vulnerabilities.
Work with the security team to perform tests and uncover network vulnerabilities.
Fix detected vulnerabilities to maintain a high security standard.
Stay current on IT security trends and news.

Education and Experience:

Education equivalent to graduation from an accredited four-year college or university.

Bachelor’s degree in computer science or a related field is preferred.
1 years’ working experience with Azure and AWS
Experience with Azure /Amazon Web Services
Architecture/Infrastructure, and security
Security+ Certification preferred

Requirements

Ability to move and lift objects 35 pounds or more.
Proven work experience as a Cybersecurity Analyst or similar role.
Experience in information security or related field.
Familiar with computer network penetration testing and techniques.
Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
Knowledge of ISO 2700 and NIST 800 frameworks.

Location: Nashville, TN

Salary: Commensurate with experience and State of Tennessee benefits package. Please include your salary requirements in your cover letter.

Tennessee Secretary of State

New Jobs

Cybersecurity Analyst