About the Work Unit. The Colorado Information Analysis Center (CIAC) serves as the focal point within the state for receiving, analyzing and sharing threat-related information among private sector, local, tribal, and federal partners. The CIAC includes representatives from various departments and partner agencies that analyze threat information with a focus on protecting civil rights, civil liberties and privacy concerns. The CIAC also provides situational awareness and a common operating picture and coordinated information collection, analysis, and dissemination for the Colorado Department of Public Safety (CDPS). Section Description:The All Threats Intelligence Unit is responsible for the collection, analysis and dissemination of all threat information for the purpose of information sharing on criminal activities and terrorism-related threats affecting Colorado. The Center collaborates with private sector, local, tribal and federal partners to support, prevent, and protect Colorado and its citizens. The infrastructure protection and cyber-security program promotes greater resiliency of state facilities, systems, assets, and state employees through an array of prevention, protection, mitigation, response and recovery strategies designed to deter, delay, detect and defend against human threats and technological hazards, while reducing the impact of natural hazards. The program also provides a range of technical assistance to state government agencies, private-sector organizations, and non-governmental organizations to enhance their security posture and preparedness against all- hazards. Through the development of public-private partnerships and ongoing support of state government agencies, the program aims to expand information sharing opportunities, enhance data collection and threat reporting to produce actionable intelligence, provide training and awareness, and adopt a layered, defense-in-depth strategy to assure the resiliency of Colorado communities and Colorado state government infrastructure. The Cyber Program Lead Analyst will work within Cyber Security Unit, under direction and supervision from the Critical Infrastructure Protection program (IP). Work Environment Monday through Friday from 8:00 a.m. to 5:00 p.m. A hybrid work model is utilized, requiring in-office attendance a minimum of three (3) days per week and two (2) days remote. About the Job. The Cyber-Security Intelligence Analyst is responsible for providing cyber intelligence and data analytics. CBI Cyber-Security Unit; the Colorado Information Analysis Center (CIAC); various infrastructure sectors including energy, water & wastewater, communications, and information technology; and other key stakeholders. The position establishes intelligence collection and production requirements related to cyber-security prevention, protection, and mitigation, and provides real-time response capability during significant cyber-security events. The position may assist with recovery efforts to promote rapid restoration of systems and networks. The position provides a variety of analytical products that enhance education and awareness and provide decision support to DHSEM leadership and other key stakeholders. This position is responsible for supporting the development of Colorado’s Whole of State Cybersecurity Program, dedicated to empowering Colorado’s communities to become the most resilient state in the U.S. against cyber threats. As part of the Whole of State’s Cybersecurity Unit, the Analyst will be responsible for providing actionable information to/with federal, State, Local, Tribal, territorial, critical infrastructure and community partners, and technical assistance support and coordination. Key Responsibilities Cyber Intelligence Investigation & Analysis. Responsible for ongoing identification, investigation and analysis of cybersecurity threat intelligence from a variety of open source and Classified sources and assisting with investigating suspicious activity reported by partner organizations. Cyber Outreach and Support. Develop a cyber outreach program to engage key partners and identify and disseminate cybersecurity best practices to internal and external stakeholders. Fusion Center Support. Serve as fusion center analyst for cybersecurity which may include giving intelligence briefings, training and presentations. Creating and maintaining an internal and external cybersecurity information sharing architecture. Cyber Incident Response Support. Assist with incident response handling (not to include recovery) in coordination with OIT, the Colorado National Guard, MS-ISAC and other federal partners. State Emergency Operations Center Support. Support the Fusion Center critical operations, human-caused cyber related events, the State Emergency Operations Center (SEOC) and activations of the SEOC during exercises or actual events in accordance with the guidelines of the National Incident Management System and the Incident Command System.