Under the direction of the Director of IT Security, the IT Security Analyst defends against IT security/cyber security incidents; and identifies, analyzes, communicates, and contains incidents as they occur for the Chumash Casino Resort and LLC properties. 

• Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls and host-based security systems.
• Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources.
• Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization.
• Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity.
• Reviews alerts and data from sensors, and documents formal, technical incident reports.
• Works with threat intelligence and/or threat-hunting teams.
• Provides network subscribers with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
• Supports the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results and making changes necessary to address deficiencies.
• Works with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts.
• Correlates network, cloud, and endpoint activity across environments to identify attacks and unauthorized use.
• Researches emerging threats and vulnerabilities to aid in the identification of incidents.
• Provides users with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary.
• Perform security standards testing against computers before implementation to ensure security.
• Performs other duties as assigned.

• Bachelor’s Degree or Associate’s Degree in Computer Science, Information Security, Cyber Security or related field preferred.
• Professional security management certification, such as a System Security Certified Professional (SSCP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or other similar credentials is desired.
• Three years of experience in IT audit, enterprise risk management, penetration tester, red team/incident responder, or as an IT Security Analyst.
• Three years of experience with regulatory compliance and information security management frameworks, such as International Organization for Standardization [IS0] 27000, COBIT, National Institute of Standards and Technology [NIST] 800.
• Strong computer proficiency including Microsoft office, Internet, and email.
• Ability to cultivate and build collaborative working relationships with a broad range of enterprise stakeholders.
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• Excellent written and verbal communication skills
• Ability to communicate technical guidance and information to end users.
• Must effectively communicate with all levels of personnel including conveying highly technical information to non-technical staff. 
• Must be a critical thinker with strong problem-solving skills.
• Able to effectively establish priorities and meet deadlines. Must work well under pressure.
• Must possess excellent troubleshooting skills.
• Excellent interpersonal skills with demonstrated patience and tact.
• Exceptional detail and follow-up skills.
• Must be able to work weekends, evenings and holidays when necessary.
• Must apply for, receive, and maintain a Gaming License from the Tribal Gaming Agency.
• Native American hiring preference applies.