Santa Fe, New Mexico
Office of Cyber Security IT Security Analyst (DoIT #10117492)
Job details
- Location
- Santa Fe, New Mexico
- Work type
- Onsite
- Compensation
- $68,890 - $103,334/yr
- Posted
- 4 weeks ago
- Apply on
- careers.share.nm.gov
About this role
Salary
$33.12 - $49.68 Hourly
$68,886 - $103,330 Annually
This position is a Pay Band C9
Posting Details
To maintain an adequate security posture by developing appropriate IT security policies, standards, and procedures with periodic updates to accurately reflect ever changing technology, legislative and user needs.
The OCS has the responsibility in protecting and monitoring the State of New Mexico¿s technology infrastructure and digital assets, including state agencies, mission critical systems and data.
Cyberattacks are dramatically increasing, and cybersecurity operations are facing new challenges. Cybersecurity is not just an IT problem anymore, it is a critical business risk, homeland security and public safety threat, voter confidence issue, and an economic development opportunity.
Technology continues to evolve, the cybersecurity landscape is constantly changing, increasing potential vulnerabilities and risk. Therefore, it is essential for the State Chief Information Security Officer (CISO) to secure additional security analysts to support the Office of Cybersecurity.
THIS POSTING WILL BE USED FOR ONGOING RECRUITMENT AND MAY CLOSE AT ANY TIME. APPLICANT LISTS MAY BE SCREENED MORE THAN ONCE.
Why does the job exist?
Key responsibilities include:
Assist with implementing proactive cybersecurity compliance strategies
Assist with identifying and addressing potential compliance risks
Assist with introducing and improving technologies and processes to strengthen security posture
Provide threat assessment, monitoring, and incident response strategies
Providing consultative and training services with a security first focus
The analyst will also manage cybersecurity services delivered to state agencies, K-12 public schools, higher education institutions, local governments, and tribal entities. These services include:
- Vulnerability management
- Attack surface management
- Penetration testing
- User security awareness training
This role ensures that OCS remains a trusted partner by driving effective security strategies and maintaining a strong compliance and risk management framework across the states digital ecosystem.
How does it get done?
Security Governance & Compliance
- Assist with the Code-Stack Vulnerability Scanning Program. Overseeing, all technical on-boarding, scoping, scanning operations, and coordination with agency development teams.
- Assist with the creation and review of cybersecurity documentation, including:
- Security policies and procedures
- Configuration and change management plans
- Ensure compliance with NIST 800 series and other applicable frameworks
- Interpret and communicate regulatory and compliance requirements to stakeholders
Security Operations Center (SOC) & Monitoring
-Monitor systems and logs using SIEM tools to detect and respond to anomalies
- Conduct threat hunting and analyze indicators of compromise (IOCs)
-Review and update security tools to block malicious IPs and signatures
-Escalate incidents and coordinate with state agencies and third-party partners
- Maintain documentation of all actions taken during investigations
- Develop chat bots and data visualizations
- Automate and standardize processes to enhance efficiency, precision and scalability of security operations center activities using a SOAR
- Develop, refine, and implement automated response playbooks that streamline repetitive SOC tasks such as alert triage, enrichment, correlation, containment, and notification
- Maintain documentation of all actions taken during investigations
Risk Management & Incident Response
- Provide oversight for risk assessments, audits, and vulnerability scans
- Provide support investigations into cybersecurity incidents
- Coordinate with internal and external teams to resolve incidents in line with policy
- Recommend and implement technical solutions to mitigate identified risks
Security Services & Technical Oversight
- Oversee services such as:
- Vulnerability Management as a Service (VMaaS)
- Attack Surface Management (ASM)
- Penetration testing
- User security awareness training
-Participate in the design of secure infrastructure and application solutions
Stakeholder Engagement & Training
- Deliver security awareness training and track participation
- Respond to security inquiries from agencies and subscribers
- Build trusted relationships with our subscribers and partners
Who are the customers?
Ideal Candidate
- Cybersecurity frameworks such as NIST 800-53 and NIST CSF 2.0
- Incident response, risk assessments, audit processes, and vulnerability management
- Information security governance, including policies, standards, and compliance frameworks
They should be skilled in cybersecurity analysis and reporting, with the ability to create clear data visualizations that communicate risk and performance metrics to both technical and non-technical audiences.
Strong interpersonal and communication skills are essential. The candidate must be able to:
- Build trusted relationships across internal teams, state agencies, and external partners
- Clearly articulate cybersecurity policies and procedures in both written and verbal formats
- Work independently and collaboratively, analyzing complex problems, proposing solutions, and documenting outcomes
- Represent the organization with professionalism and clarity in cross-agency and public-sector settings
Additional preferred experience includes:
Vulnerability remediation and threat hunting
Familiarity with tools such as Securin Panther, ASM platforms, KnowBe4, Microsoft Power Platform, Office 365, Microsoft Defender, Azure Active Directory, Nessus Tenable, and Cisco Security Solutions
This role is ideal for someone who thrives in a dynamic environment and is passionate about strengthening cybersecurity across the State of New Mexico.
Minimum Qualification
Employment Requirements
Working Conditions
Supplemental Information
Do you know what Total Compensation is? Click here
Agency Contact Information: Natisha Montoya, [email protected], Email
For information on Statutory Requirements for this position, click the Classification Description link on the job advertisement.
Bargaining Unit Position
Ready to apply to State of New Mexico?
ApplyBolt finds matching jobs, tailors your resume, and submits applications for you.