Information Technology Services (ITS) at MCCCD is seeking a vigilant and analytical Cybersecurity Analyst to join our dynamic security team. This role serves as a frontline defender, focusing on the detection, investigation, and containment of security incidents across the Districts digital ecosystem. On a regular basis, the Analyst will perform deep-dive log analysis, triage automated security alerts, and execute incident response procedures to protect network integrity and sensitive data. By collaborating with various IT teams and end-users, the Analyst ensures that security threats are not only identified but effectively mitigated to maintain a resilient security posture.
Essential Functions
25% - Incident Response & Root Cause: Investigates moderately complex security incidents; performs detailed root cause analysis and implements containment and eradication measures following established IR procedures.
20% - Continuous Monitoring & Triage: Uses security solutions to monitor MCCCDs networks and systems; assists to identify, thwart, and repel security breaches, intrusions, and anomalous activity through active triage.
20% - Log & Alert Analysis: Analyzes security alerts and telemetry from various security tools, network devices, and information systems to identify and validate potential threats.
15% - Vulnerability Management: Performs vulnerability scans of networks and applications; identifies technical weaknesses, prioritizes risks, and recommends remediation or mitigation strategies.1
10% - Proactive Threat Research: Researches and analyzes emerging cybersecurity threats and trends; makes recommendations to proactively enhance the District's security posture and defense-in-depth strategies.
5% - Security Hardening & Configuration: Evaluates network and system configurations against best practices (e.g., CIS benchmarks) and risk-based access controls; recommends hardening strategies.
5% - Related Duties as Assigned: Attends and participates in team and division meetings; performs related duties as assigned.