Information Security Analyst

CLASSIFICATION: Administrative

DEPARTMENT: Information Technology (IT)

FLSA STATUS: Exempt

SUPERVISION RECEIVED: This position reports to the Director of Information Security

SUPERVISION EXERCISED: This position may supervise work-study students, as necessary. 

POSITION SUMMARY: This role sits within the Information Technology team and focuses on safeguarding university data, systems, and network infrastructure. The analyst monitors security operations, assists with incident response, works closely with IT colleagues, and helps mentor student workers in our Student Security Operations Center (SOC). Strong candidates will be comfortable working independently in a collaborative, mission-driven environment.

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES:

• Monitor and Analyze Security Events: Review security event logs, identify potential security incidents, and conduct initial analysis to determine root cause and potential impact.
• Assist with Security Controls: Help deploy and maintain security tools, including firewalls, endpoint protection, intrusion detection/prevention systems (IDS/IPS), and multi-factor authentication.
• Conduct Vulnerability Assessments: Participate in vulnerability scans and risk assessments across campus systems; present actionable remediation recommendations to system owners.
• Respond to Security Incidents: Participate in active incident response workflows, including containment, eradication, recovery, and post-incident documentation.
• Develop Security Automation: Assist in building and refining scripts and automated workflows to streamline security monitoring and routine tasks.
• Support the Student SOC: Assist the Director of Information Security in operating the Student Security Operations Center, including providing day-to-day guidance to student employees.
• Collaborate across IT: Work closely with systems administrators, network engineers, and Helpdesk staff to integrate security best practices across campus IT operations.
• Stay Current on Security Trends: Maintain awareness of emerging cyber threats, technical vulnerabilities, and industry trends through ongoing education and professional development.
• Support Compliance Efforts: Help document procedures and ensure adherence to relevant higher education regulations and standards (FERPA, GLBA, PCI-DSS, HIPAA).

QUALIFICATIONS: Bachelor's degree or greater in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience). Foundational understanding of core security concepts, networking fundamentals, firewalls, operating system security (Windows/Linux), and encryption principles. Strong problem-solving abilities with a keen attention to detail when analyzing security logs and technical data. Clear written and verbal communication skills, with the ability to explain technical security concepts to non-technical faculty, staff, and students. A collaborative mindset, a desire to learn, and an eagerness to work in a service-oriented academic community.

PREFERRED QUALIFICATIONS: CompTIA Security+ (preferred upon hire, or willingness to obtain within 6 months), CompTIA CySA+, or SSCP. Prior employment, prior internship, student worker experience in IT/Security, or hands-on lab experience. Familiarity with scripting or programming languages (e.g., Python, PowerShell, or Bash) for basic automation tasks.