Information Security Analyst II – Hybrid

About the role

The Enterprise Information Security office of the State of Utah is seeking an Information Security Analyst II to provide security guidance and support to state agencies. This hybrid position combines on‑site collaboration in Taylorsville with remote work, focusing on incident response, compliance, and risk management.

Key responsibilities

• Coordinate security incident response activities and communicate alerts on intrusions, compromises, and threats.
• Assist agencies with regulatory compliance (PCI DSS, IRS FTI, HIPAA, CJIS) and support audit processes.
• Perform risk assessments, threat intelligence monitoring, and security assessments for systems and applications.
• Review firewall requests and monitor security controls across networks, endpoints, and cloud environments.

Required profile

• Proven experience leading daily security monitoring, threat hunting, and anomaly investigation.
• Expertise in incident response lifecycle, forensic investigations, and log analysis.
• Strong background in vulnerability management, penetration‑testing coordination, and risk assessment.
• Deep knowledge of NIST frameworks, CIS Controls, PCI DSS, HIPAA, and related regulatory standards.

Required skills

• Security monitoring & threat hunting
• Incident response & forensic analysis
• Vulnerability assessment & penetration‑testing coordination
• Threat modeling & risk assessment
• NIST CSF, NIST RMF, NIST 800‑53
• CIS Controls, PCI DSS, HIPAA compliance
• Zero‑trust and SASE architecture principles
• Firewall management and endpoint protection
• Log analysis, malware analysis, packet capture

What we offer

• Competitive hourly wage ranging from $31.41 to $49.80
• Hybrid work schedule with two mandatory on‑site days per week
• Career‑service exempt at‑will employment with professional development opportunities