PROTECT WISDOT AS A CYBERSECURITY SPECIALIST!

Are you a cybersecurity professional ready to defend critical infrastructure and help safeguard one of Wisconsin’s largest state agencies?
The Wisconsin Department of Transportation (WisDOT) is seeking a Cybersecurity Analyst (IS Technical Services Specialist) to join our IT Security Section. In this role, you will play a frontline role in detecting, analyzing, and responding to threats targeting WisDOT’s networks, applications, and 3,500+ employees statewide.
This position is headquartered at Hill Farms State Office Building on the near west side of Madison, WI and allows the option to work remotely up to 5 days per week. All employees are generally expected to be headquartered and work within the State of Wisconsin. This position will be required to come into the office for training, meetings and/or operational needs. This topic will be discussed more at the time of the interview.
Why work with us in DOT IT? Check out this link for all the benefits of joining our team, or read more below:

WisDOT is a great place to work! In addition to meaningful and rewarding work, we offer a competitive benefits package featuring:

• Substantial leave time including at least 3.5 weeks of paid leave time to start, 9 paid holidays, and 130 hours of sick time that roll over each year.
• Excellent and affordable health, vision, and dental benefits (health plan options start at just $42/month for single plans and $104/month for family plans after two months of employment)
• A casual office atmosphere, flexible work schedules, and telework options depending on the position’s requirements
• An exceptional pension plan with employer match and lifetime retirement payment, plus an optional tax advantaged 457 retirement savings plan
• Well Wisconsin Wellness Program
• A free and confidential employee assistance program that offers employees and their immediate family dependents a variety of tools, resources, and professional consultation services to support their health, goals, and overall well-being
• Use this Total Rewards Calculator to see the total value of our competitive benefits package!

In addition to our generous employee benefits, we strive for inclusivity and celebrate different religious holidays and cultural observances and provide flexibility for utilizing paid time off for such celebrations. For more information on WisDOT you can visit our website by clicking here.
The Wisconsin Department of Transportation is an organization dedicated to creating transportation solutions through innovation and exceptional service. We are committed to fostering an environment rooted in Integrity, Diversity, Excellence, and Accountability. Click here to learn more about how we apply these values in our work.

MINIMALLY QUALIFIED APPLICANTS MUST DETAIL HAVING EXPERIENCE IN ALL THE FOLLOWING IN ORDER TO BE CONSIDERED:

• Professional experience working in cybersecurity or IT security operations
• Professional experience working with incident detection, analysis, or response using one or more security monitoring tools (e.g., SIEM, IDS/IPS, endpoint detection, or secure web/email gateways)
• Professional experience applying information security concepts such as phishing analysis, malware detection, or vulnerability management

IN ADDITION TO HAVING EXPERIENCE IN ALL THE ABOVE, WELL QUALIFIED APPLICANTS WILL ALSO DETAIL THEIR EXPERIENCE IN ONE OR MORE OF THE FOLLOWING:

• Experience completing forensic analysis of endpoints, email, or network traffic
• Experience working with cybersecurity frameworks such as NIST CSF, CIS Controls, or Zero Trust
• Experience conducting or participating in security tabletop exercises
• Providing updates on technical security incidents to management/executive leadership

WHY THIS ROLE MATTERS

As a Cybersecurity Analyst on the Incident Response (IR) team, you will help protect WisDOT’s transportation systems and sensitive data from evolving cyber threats. You’ll collaborate with peers across the security team, infrastructure, and application groups to ensure the department is prepared to respond quickly and effectively when incidents occur. Your work directly impacts public trust, the security of digital services, and the resilience of the state’s infrastructure.

KEY RESPONSIBILITIES:

• Incident Detection & Response: Investigate alerts from security monitoring tools; triage and respond to phishing, malware, and other security events.
• Threat Analysis & Forensics: Perform root cause analysis, conduct endpoint and email forensics, and provide technical recommendations to mitigate threats.
• Vulnerability Management Support: Partner with teams to track, prioritize, and remediate vulnerabilities.
• Collaboration & Communication: Coordinate incident response with business units, enterprise partners, and external stakeholders; document findings for leadership, compliance, and lessons learned.
• Continuous Improvement: Participate in tabletop exercises, enhance playbooks, and help shape WisDOT’s overall cybersecurity defense strategy.