Job Descriptions

Other Titles Include

• Security infrastructure support specialist/technician
• Security systems analyst
• Security systems technician
• Security control analyst

Note: This role is most commonly found in large or medium-sized organizations.

Reporting relationship

To be completed by the user of this job description as appropriate.

Job purpose / summary

Tests, implements, deploys, maintains, and administers the security operations infrastructure hardware and software.

Duties and responsibilities

• Actively monitor security system performance, troubleshoot and resolve hardware or software interoperability issues, and system outages and faults
• Install, configure, and maintain security system software, hardware, and peripheral equipment
• Develop, conduct, and maintain incident reports and vulnerability and impact assessments
• Develop and maintain tracking and solution database
• Analyze and recommend improvements and changes to support improved security operations
• Audit, log and report life-cycle management activities
• Administer security system accounts, privileges, and access to systems and equipment
• Conduct asset management or inventory control of system and equipment resources
• Develop, deliver, and oversee training material and educational efforts

Tools and Technologies

• Cybersecurity systems tools, logs, and procedures
• Organizational policies and directives
• Security event and incident management systems and/or incident reporting systems and networks

Competencies

KSAs applied at the basic level:

• Threats to information systems and their security
• Network security architecture concepts, protocols, components, and principles (e.g., application of defense-in-depth).
• Basic system, network, and OS hardening techniques.
• Transmission records and modes (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP))
• Network traffic analysis (tools, methodologies, processes).
• Identity, credential and access management architectures and standards
• Cybersecurity incident management policy, procedures and practices
• Organizational analysis of user and business trends
• Client consultation and problem resolution

KSAs applied at an advanced level:

• Cybersecurity systems test procedures, principles, and methodologies
• Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
• Install, configure, operate, maintain and monitor related applications
• Cybersecurity infrastructure troubleshooting, analysis and remediation
• Cybersecurity systems policies, account management and controls

Direct reports (if appropriate)

To be completed by the user of this job description as appropriate

Qualifications

Education. Post-secondary education (degree or diploma in related computer science or IT field or equivalent training and experience.

This is an often an entry-level job to the security domain after gained experience in technical, network administrative, or other similar functions. With additional training and experience there is potential for more technically or operationally focused roles as well as management opportunities.

Training in cybersecurity systems, security systems operations and vendor-based tools (e.g. intrusion detection systems, firewalls, anti-virus, incident management, etc.)

Certifications.

To be completed by the user of this job description as appropriate

Other relevant qualifications.

To be completed by the user of this job description as appropriate

Key Attributes.

To be completed by the user of this job description as appropriate

Experience. 2 – 3 years in network operations and security.

Working conditions (if required)

If the job requires a person to work in special working conditions this should be stated in the job description. Special working conditions cover a range of circumstances from regular evening and weekend work, shift work, working outdoors, working with challenging clients, and so forth.

Physical requirements (if appropriate)

If the job is physically demanding, this should be stated in the job description. A physically demanding job is one where the incumbent is required to stand for extended periods of time, lift heavy objects on a regular basis, do repetitive tasks with few breaks, and so forth.