Minimum Qualifications

Candidates must clearly demonstrate all of the following qualifications in their resume:

Position requires a minimum of two (2) years of experience in an information technology role that includes:

• Direct experience supporting or monitoring security tools such as endpoint protection (anti-virus), log management, enterprise firewalls, intrusion detection, web content filtering and/or similar widely deployed tools used for security and endpoint management.
• Understanding of and experience with network protocols/ports, network devices, multiple operating systems.
• Ability to analyze common network traffic, i.e., Transmission Control Protocol/Internet Protocol (TCP/IP), UDP, common Internet/web traffic, and mail and understanding of DNS, firewalls, proxies, SIEM, antivirus, and IDPS concepts can be shown through experience doing network support/management, hands-on desktop support, or using network, SIEM, endpoint protection or other security tools.
• Experience with enterprise level application support including Microsoft Windows, Microsoft Office.
• Experience supporting remote users must include experience in an information security role.
• Ability to deliver effective verbal or written messages that facilitate a mutual understanding on both parties. Experience presenting information to leadership and peers on various cyber topics.
• Customer service skills that include active listening, empathy, and problem-solving.

A bachelors degree in Information Technology or a related field substitutes for two (2) years of experience, OR a related associates degree substitutes for one (1) year.

Preferred Qualifications

• Experience in project administration/project management including experience coordinating resources, managing vendors, and tracking a budget.
• Experience researching, writing, and delivering professional communications related to information security, security metrics, and newsletters.
• Knowledge and understanding of current cyber threats. Previous experience working on a Security Incident Response or Security Operations Center team.
• Technical knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, anti-malware solutions, automated policy compliance tools, and desktop security tools is preferred.
• Fundamental knowledge of network traffic alerts to assess, prioritize and differentiate between potential intrusion attempts and false alarms.
• Experience with an intrusion detection system (ex: Checkpoint, Sourcefire, McAfee, Palo Alto, TippingPoint, Snort).
• Security incident handling understanding. To include, working knowledge of HTTP, Linux/UNIX, large-scale networks, netflow analysis, SIEM and EDR event analysis, etc.

Additional Requirements

It is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following:

• SEMA4 Records Check (applies to current and past state employees only)
• Criminal History Check
• Reference Check
• Social Security and Address Verification
• Education Verification
• CJIS Background Check
• Other legally required checks

Minnesota IT Services will not sponsor applicants for work visas. All applicants must be legally authorized to work in the United States.