Security Analyst III

Security Analyst III

Location

US-KS-Olathe

ID

2025-3351

Category

Computing and Information Technology

Benefits Category

Full Time - Regular (Full Benefits)

Remote

Hybrid

Salary Min

USD $51.62 / Hr.

Salary Max

USD $77.43 / Hr.

Organizational Unit

Department of Technology and Innovation

Work Schedule

Monday - Friday; 8 : 00am - 5 : 00pm

Driving Status

Occasional (less than 5%)

Overview

Johnson County Government is seeking a skilled and experienced Security Analyst III to join our team. In this role, you will play a critical part in maintaining and enhancing our security posture and ensuring compliance with legal and regulatory requirements. You will lead major security initiatives, drive continuous improvement in our security practices, and safeguard our information assets by developing and enforcing robust security architecture, policies, and procedures. A strong commitment to professional growth is essential, demonstrated through active participation in Johnson County's training opportunities, including specialized programs such as SANS cybersecurity courses and other professional development resources.

Job Description

This position is currently eligible to work in a hybrid work environment with both onsite and remote work. Residency within the Kansas City-Overland Park-Kansas City, MO-KS Combined Statistical Area, which generally includes the Kansas counties of Johnson, Wyandotte, Leavenworth, Miami, and Linn, and the Missouri counties of Jackson, Clay, Platte, Cass, and Ray, is required. We offer wonderful benefits, retirement plans, wellness incentives, a great organizational culture, and much more! If you're searching for something more than just a job, something akin to a calling, then consider the challenge and opportunity of being a member of Johnson County Government! First review of applications will begin on Thursday, November 6, 2025.

Key Responsibilities :

Strengthen the county's security posture through technology evaluation, process improvement, and penetration testing.

• Lead and execute web application penetration tests, identifying vulnerabilities in custom and third-party applications, and working with development teams to remediate findings.
• Conduct and analyze vulnerability scans and penetration tests across infrastructure and applications.
• Collaborate with other teams within the Department of Technology and Innovation to standardize and improve security processes across all business units.
• Conduct reporting and auditing of Identity and Access Management.
• Identify and analyze current and evolving threats and vulnerabilities, especially those targeting web applications.
• Ensure compliance of enterprise IT architecture with federal health, privacy, and financial regulations.
• Conduct comprehensive risk assessments of the current environment and proposed changes to the hardware and software stack to identify potential security vulnerabilities and ensure alignment with organizational security standards.
• Develop and document security policies and procedures aligned with industry best practices and emerging threats.
• Lead security projects, including the deployment of new technologies and tools for application security testing.
• Analyze and respond to security incidents, advisories, and alerts.
• Promote secure development practices and provide guidance to developers on secure coding.
• Work with end users to address business functionality needs while ensuring secure methodologies.
• Train end users and promote security awareness for improved system security and efficiency.
• Monitor and manage security-related contracts and tools.
• Utilize forensic tools for data collection and incident response.
• Participate in on-call rotation.

Job Requirements

Special Knowledge and Skills Needed :

Network and security management software

Required Experience

Preferred Qualifications

Familiarity with IT security standards (ISO, NIST) and regulatory frameworks (CJIS, HIPAA, PCI).

Experience implementing security control frameworks such as the Center for Internet Security (CIS) Benchmarks and / or Security Technical Implementation Guides (STIGs) to ensure system hardening and compliance.

Experience supporting Microsoft business applications (Active Directory, Exchange, Azure, Entra, Purview, Defender for Office).

Experience working with SCADA (Supervisory Control and Data Acquisition) and ICS (Industrial Control Systems).

Experience using network analysis tools, scripting languages including UNIX command line utilities, software vulnerabilities, exploits and malware.

CISSP certification.

Soft Skills