The Florida Department of Health's Office of Information Technology is seeking a Cybersecurity Analyst to monitor, analyze, and respond to cybersecurity alerts across enterprise systems within a security operations center environment. The role emphasizes proactive threat hunting, meticulous incident lifecycle documentation, and collaboration with internal teams, the Office of Inspector General, approved service providers, and other stakeholders to strengthen the department's security posture. This onsite position is based in Tallahassee, Florida, with a salary range of USD 70,000 - 85,000 per yearly.
Responsibilities
- Serve as the Cybersecurity Analyst supporting the Department's operations for Headquarters, divisions, and County Health Departments, coordinating with Department IT staff, the Office of Inspector General, approved service providers, and other authorized internal and external stakeholders.
- Monitor, analyze, investigate, and respond to cybersecurity alerts and incidents across enterprise systems.
- Perform security event correlation using data from endpoints, servers, identity systems, Microsoft 365, cloud platforms, networks, SIEM, EDR, and other security technologies.
- Conduct incident triage, containment, eradication, recovery, and post-incident analysis.
- Perform proactive threat hunting to identify indicators of compromise and emerging threats before they impact the organization.
- Document the complete incident lifecycle, including evidence, timelines, technical findings, remediation activities, and executive reporting.
- Analyze cyber threats, vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and recommend improvements to strengthen the Department's security posture.
- Configure, tune, and optimize enterprise cybersecurity technologies in accordance with approved security standards and change management procedures.
- Support enterprise risk management by identifying control gaps, assisting with security assessments, and tracking remediation efforts.
- Maintain incident response playbooks, standard operating procedures, and operational metrics.
- Collaborate with Department leadership, IT teams, County Health Departments, the Office of Inspector General, vendors, and external partners during cybersecurity investigations and response activities.
- Perform other assigned duties, including emergency response, continuity support, administrative responsibilities, and other activities supporting the unit and agency mission.
Requirements
- Proficient computer skills including Word, Excel, PowerPoint and Outlook.
- Knowledge of monitoring processes and/or working with ticketing software.
- Knowledge of computer databases.
- Knowledge of laws, legal codes, court procedures and government rules & regulations.
- Knowledge of the structure and content of the English language including spelling, grammar, and composition.
- Understanding written sentences and paragraphs in work related documents.
- Effective verbal and written communication skills.
- Ability to establish and maintain effective working relationships, listen, and ask appropriate questions.
- Conduct fact-finding research and knowledge of data collection and analysis methods.
- Ability to organize data into logical formats for reports and documents; know how to find essential information and classify multiple data points.
- Ability to plan, organize, and prioritize work assignments; work independently; maintain high accuracy and attention to detail; and maintain confidentiality.
- Knowledge of the cybersecurity incident-response lifecycle and security operations, including agency-adopted incident-response and risk-management frameworks.
- Experience with SIEM and EDR technologies; Microsoft 365, identity, endpoint, server, network, and cloud telemetry; Windows and Linux fundamentals; common network protocols; threat intelligence; vulnerability management; malware behavior; digital forensics; evidence handling; access control; change management.
- Skill in security alert triage, log correlation, incident investigation, threat hunting, incident documentation, security-tool configuration and tuning, scripting and automation, network and process analysis, technical writing, and use of Department-issued computing equipment, ticketing systems, and approved cybersecurity platforms.
- Ability to assess incident scope, severity, and business impact; manage concurrent incidents and competing priorities; exercise sound judgment under time-sensitive conditions; maintain complete and accurate records; and support after-hours cybersecurity response when required.
Technologies
- SIEM, EDR, Microsoft 365, PowerShell, Python, Windows, Linux, Splunk, Sentinel, Ticketing systems
Benefits
- Annual and Sick Leave benefits
- Nine paid holidays and one Personal Holiday each year
- State Group Insurance coverage options, including health, life, dental, vision, and other supplemental insurance options
- Retirement plan options, including employer contributions
- Flexible Spending Accounts
- Tuition waivers
Mission
To protect, promote & improve the health of all people in Florida through integrated state, county & community efforts.
Vision
To be the Healthiest State in the Nation.
Values
- Innovation: We search for creative solutions and manage resources wisely.
- Collaboration: We use teamwork to achieve common goals & solve problems.
- Accountability: We perform with integrity & respect.
- Responsiveness: We achieve our mission by serving our customers & engaging our partners.
- Excellence: We promote quality outcomes through learning & continuous performance improvement.
Location
Onsite in Tallahassee, Florida. This role supports multiple campus locations with the following ZIP codes: 32399, 32301, 32302, 32303, 32304, 32305, 32307, 32308, 32309, 32310, 32311, 32312, 32316, 32317.
Nearest Major Market
Tallahassee
Veterans’ Preference
Pursuant to Chapter 295, Florida Statutes, veterans’ preference applies to Career Service vacancies. Certain service members may be eligible for waivers of postsecondary educational requirements. Veterans’ Preference documentation must be attached with each submission, including character of service (for example, DD Form 214 Member Copy #4) and any other documentation required by Rule 55A-7, Florida Administrative Code. All documentation is due by the close of the vacancy announcement.
