Position: Network Security Analyst

Competency Guide

Position: Network Security Analyst

Competency Factor

/ Question / Evaluation Criteria
Practical experience and demonstrated knowledge of information security, intruder techniques, malicious code, and incident response; encryption techniques and common tools preferred. / Give us an example of your dealing with each of these: intruder techniques, malicious code, and incident response. Describe how you got involved, what precisely you did, and how it turned out.
Did you get stuck at any point in working through these problems? If so, what did you do about that? /

• Recognizes getting stuck and figures out how to get past that.
• Knows about escalation paths.
• Can keep their cool and deal with upset clients in face to face situations as well as distant ones (phone; e-mail).
• Knows difference between making customer satisfied and happy.

Contribution is limited to performing own duties on a timely basis in an effective manner. Expresses one’s ideas and listens to ideas of others. Keeps appropriate people informed and up-to-date. / In teamwork, often it can be tricky striking a balance between expressing one’s own ideas and listening to ideas of others. Describe a situation or two over the last year where you had to do that. /

• Operates in collaborative way.
• Willing to move ahead even with partial information/answers. “Didn’t get us to X, but got us to W.”

Level at which one interacts with others; is responsible for developing factual and logical presentations of one's ideas and opinions, and depends on effective listening skills to do one's job. Generates trust and establishes rapport. / Describe a situation in which you had to generate trust, establish rapport with a person or group – where that trust and rapport either wasn’t there or had even been damaged. /

• Pro-active in reestablishing/ turning around relationships.
• Established harmony, sense of collaboration/cooperation.
• “I went out of my way. I recognized a problem and went to do it.”

Duties and activities covered by specific instructions and established work practices that requires some interpretation. / Tell us about a time when you had to make a decision that was not covered by specific instructions and/or established work practices that required some interpretation. What did you do? /

• Sensitivity.
• Consciousness of precedent.

Work affects own work unit. Established departmental methods are followed; works within job specific deadlines and schedules set by supervisor. Escalates more complex issues. / Pick a fairly complex issue or two that you had to escalate. How did you decide you needed to do that? How did you find the right person to escalate it to? /

• Asks, “Who is this going to affect?”
• Doesn’t think he/she knows it all.
• Doesn’t play safe, avoid the tricky stuff.

A proven ability to present difficult concepts to a diverse audience of technical and non-technical staff will be a critical determinant of job success. / What are some situations where you have had to present difficult concepts to a diverse audience composed of both technical and non-technical staff? What did you do to be able to reach both groups?