Security Analyst

CTA Job Description

Position Title:

Advanced Information Security Analyst

About Capital Technology Alliance:

At Capital Technology Alliance, we believe changing the future of technology means valuing people. We are committed to building a collaborative, high-performing environment where professionals are empowered to deliver meaningful impact. Our teams work on challenging, often high-visibility initiatives that support mission-critical systems, enterprise modernization efforts, and data-driven decision-making.

CTA is proud to demonstrate a high renewal rate with our employees and contractors. We place a high value on expertise. That's why CTA is committed to paying top rates in the industry and connecting you with positions and flexible engagement options that match your skills and professional goals.

CTA's Flexible Engagement Options:

We believe top talent deserves flexible engagement options. Every CTA opportunity offers flexible engagement models so you can choose the path that fits your goals, lifestyle, and financial preferences. Qualified candidates may choose between:

• Employee (W2) - Join CTA as a full-time team member with consistent pay, eligibility for benefits, long-term career growth, and the opportunity to build lasting relationships within a respected government and enterprise technology consulting firm.
• Staff Augmentation (1099 or Corp-to-Corp) – Prefer consulting flexibility? Partner with CTA while maintaining your independence and autonomy, working on high-impact projects that make a difference.

No matter which model you choose, you'll work alongside experienced professionals delivering mission-critical solutions to state, local, and enterprise clients. We focus on long-term partnerships, not transactional placements. Our goal is to provide engagement options that align with your career objectives and preferred working arrangement while ensuring seamless integration with our teams and client environments, supporting your success every step of the way. At CTA, your expertise drives impact and your career path is in your hands.

Position Overview:

Capital Technology Alliance is seeking an experienced Advanced Information Security Analyst for a full-time, on-site engagement in Tallahassee, Florida. This role is within a large state agency's Office of Information Technology, supporting a high-security environment with critical compliance requirements. The analyst will lead technical security project implementations, manage security tools and platforms, and collaborate with cross-functional teams to maintain a strong and compliant security posture.

Scope of Work:

The Advanced Information Security Analyst is responsible for leading the technical implementation of security projects, focusing on system hardening, network security, and identity management. The role requires hands-on expertise in firewalls, IDS/IPS, encryption, and secure Microsoft configurations, as well as conducting vulnerability assessments and developing remediation strategies. The analyst will manage security tools, support threat detection and incident response, and ensure integration of security platforms. Compliance with CJIS and applicable state regulations is critical, as is working with GRC teams to address audit gaps. The role also requires reengineering security processes for efficiency and compliance, and staying informed on emerging threats and technologies.

Key Responsibilities:

Project Implementation

• Lead the technical implementation of security projects, focusing on system hardening, network security, encryption tools, vulnerability management, security monitoring, and IAM systems within a Microsoft and Azure environment.
• Collaborate with cross-functional teams to deploy security solutions meeting project requirements.
• Ensure timely delivery of security projects aligned to scope, timeline, and budget.

Technical Expertise

• Provide hands-on expertise in firewalls, IDS/IPS, encryption, endpoint protection, and secure configuration of Microsoft environments.
• Implement secure system architecture and networking solutions within Microsoft Azure.
• Conduct vulnerability assessments and develop remediation strategies for continuous improvement.

Security Tools and Platforms

• Configure, deploy, and manage SIEM systems, Microsoft Azure Security Center, and endpoint security solutions.
• Ensure integration of security platforms across IT systems and support threat detection and incident response.

Incident Response

• Design and maintain incident response procedures tailored to a high-security environment.
• Conduct root cause analysis and implement appropriate remediation measures.

Security Compliance

• Ensure adherence to CJIS, state regulations, and other relevant security compliance standards.
• Work closely with GRC teams to ensure organizational compliance with state and federal security regulations.
• Assist with security audits and address identified gaps.

Documentation and Training

• Develop and maintain up-to-date documentation of cybersecurity solutions and processes.
• Provide training to IT staff on security protocols and contribute to security awareness initiatives.

Process Reengineering

• Design, implement, and optimize security processes to enhance operational efficiency and mitigate risks.
• Reengineer existing security processes to improve system integrity and ensure alignment with evolving technology and regulatory standards.

Collaboration and Support

• Work with IT operations and development teams to integrate security into systems and processes.
• Provide troubleshooting and support for cybersecurity-related issues in Microsoft and Azure environments.
• Stay current on emerging cybersecurity threats and technologies.

Required Qualifications:

Bachelor's degree in Computer Science, Information Systems, or a related field from an accredited institution is required. Relevant experience may be substituted for education on a year-for-year basis.

• 5+ years of server or network administration experience.
• 3+ years of information security administration experience in an enterprise environment with 1,000 or more users.
• 2+ years of experience managing technical implementations.
• 3+ years of SIEM experience.
• 3+ years of vulnerability management experience.
• Knowledge of security issues, techniques, and implications across all existing computer platforms.
• Experience maintaining and supporting 3rd party antivirus applications.

Preferred Qualifications:

• Experience working with IDS/IPS systems.
• Experience using Office 365 Data Loss Prevention (DLP).
• Experience preparing status reports and providing management briefings.
• Knowledge of IT standards in a criminal justice or high-security environment.
• Experience with Microsoft security technologies such as Azure Security Center, Microsoft Defender, and Active Directory.
• Familiarity with CJIS security standards and applicable state regulations.

Job Specific Knowledge, Skills, and Abilities:

• Strong analytical and problem-solving skills in a complex, high-security IT environment.
• Ability to lead security projects and collaborate effectively with cross-functional teams.
• Deep familiarity with Microsoft Azure security architecture and enterprise security frameworks.
• Excellent written and verbal communication skills for documentation, reporting, and training.
• Ability to balance multiple security initiatives simultaneously while maintaining compliance standards.
• Commitment to staying current with cybersecurity best practices and emerging threat landscapes.

Location/Work Terms:

This is a full-time, on-site position located in Tallahassee, Florida. The expected schedule is 40 hours per week. Equipment and office space will be provided by the client.

Travel Requirements:

No travel is required. This is a local, on-site engagement. Travel expenses are not reimbursable under this engagement.