Role Description This is a remote position. Seeking an SOC Analyst that possesses strong expertise in Endpoint Detection and Response (EDR) tools and cyber-security incident handling. The resource will be expected to provide security monitoring and response efforts for, and in coordination with the SOC, as well as: - Strong communication, reporting, and documentation abilities. - Monitor, analyze, and respond to cyber-security events, alerts, and incidents affecting State of Iowa IT systems. - Take appropriate actions to protect IT assets from potential incidents and threats. - Document and report changes, trends, and implications related to evolving cyber-security tools, systems, and solutions. - Follow SOC processes and assist ISD Security Engineers and OCIO support teams during alerts, events, and incidents. - Submit new events and update existing events within the SOC ticketing system. - Provide phone and email support to state agencies and participating partners during alerts, events, and incidents. - Provide off‑hours or ad‑hoc shift support as required. - Proven ability to collaborate effectively with partners across varying technical backgrounds. - Capability to perform Tier 1 troubleshooting, including log collection, documentation review, and appropriate escalation. - Maintain up‑to‑date knowledge on relevant cyber-security technologies and tools. - Support Tier 1 SOC Analysts in triaging cyber-security events, alerts, and incidents. - Follow detailed operational procedures to analyze, escalate, and support remediation of critical security incidents. - Assist with SOC metrics, reporting, and communications. - Support incident response activities up to the preliminary forensics stage. - Monitor EDR tools and perform initial assessment and data gathering for alerts. Qualifications - Hands on experience working with Endpoint Detection and Response (EDR) tools - Required (3 years) - Experience responding to cyber security events and incidents - Required (3 years) - Experience working with Crowdstrike, or comparable EDR tool - Required (3 years) - Ability to work in high pressure, fast paced environments - Required (3 years) Benefits - Paid Sick Time - Insurance for Medical, Dental, Vision and Life Available - 401(k) including Employer Match - HSA, Short-term & Long-term Disability Available Company Description We are an EEO/Veterans/Disabled employer.

• Analyze design, develop, implement, and support code for government customer, the United States Postal Service • Lead security assessments for USPS applications and domains, including cloud systems • Collaborate with cross-functional teams, business units, and IT stakeholders to guide them through the USPS Assessment & Authorization (A&A) process • Develop actionable security blueprints, security models, and recommendations that strengthen enterprise security posture • Utilize GRC tools, vulnerability scanning technologies, and security architecture best practices to evaluate risks, document findings, and support authorization decisions

• Assist in protecting high-value compute nodes by learning how to manage encryption, secure access, and maintain the integrity of supercomputing fabrics • Assist in protecting the systems supporting the program operations by learning how to review scans, identify vulnerabilities, recommend remediations, and document the environment for security assessments • Work side-by-side with SOC analysts to monitor logs, identify anomalies, and learn how to manage Indicators of Compromise (IOCs) using SIEM tools • Collaborate with a team of peers to research and propose solutions to current cybersecurity challenges, such as vulnerability management and automated patch tracking • Gain exposure to ASA program leadership and participate in mentoring circles led by early career champions

Role Description Monitor and analyze network traffic using tools such as Security Information and Event Management systems to detect and respond to security incidents. - Provide authentication and authorization to specific user profiles, external profiles, and service accounts/non-human accounts. - Perform vulnerability scans and assessments to identify and address potential security weaknesses across systems and networks. - Manage user/service accounts, changing the rules/permissions by using UNIX commands, providing SUDO access based on user requirements, and forcing the server to change the rules. - Handle incident tickets, provide Multi-Factor Authentication (MFA) and resolve incident tickets with agreed SLA (Service-Level Agreement) and perform root cause analysis for the technical incidents and ensure no redundancy for such incidents. - Implement and maintain endpoint security tools such as antivirus software, encryption solutions, and endpoint detection and response systems. - Review and analyze security logs from multiple sources, including network devices, servers, and applications, to identify abnormal patterns or potential threats. - Manage the data migration from SharePoint (On-Premises) to Microsoft 365. - Contribute to the development, implementation, and testing of security protocols, disaster recovery plans, and incident response strategies. - Lead the internal project team to streamline the process of resolving issues and ensure the expected support/communication with/to end-users and clients. - 100% telecommuting is permitted from home office per company policy to support New Era offices or clients located throughout the United States. Qualifications - Bachelor’s degree (or foreign educational equivalent) in Computer Science, Information Technology or a closely related technical field plus at least 3 years of post-degree, progressive experience in each of the below items; OR, alternatively, a Master’s degree (or foreign educational equivalent) in Computer Science, Information Technology or a closely related technical field plus at least 1 year of experience, gained at any time, in each of the below items. Requirements - Monitoring and analyzing network traffic threats; - Implementing and managing antivirus, encryption, and Endpoint Detection and Response (EDR) tools; - Securing cloud environments (such as AWS, Azure, Google Cloud) including configuration of cloud-native security tools, access controls, and data protection strategies; - Automating routine security tasks such as log parsing, vulnerability scans, and patch management with scripting languages (such as Python, Bash, PowerShell); - Configuring firewalls and VPNs to protect network boundaries; - Managing Oracle systems including Oracle Identity Management, Oracle E-Business Suite, Oracle Identity System Administration, and Oracle Data Integrator. Company Description