Security Analyst I

About the Role

The Security Analyst I, under the supervision of the Chief Information Security Officer, is an entry-level position focused on performing routine information security functions.

Key Responsibilities

• Monitor & Respond (40% Effort)
• Monitor for management and security agents on university-owned assets and coordinate remediation with responsible teams.
• Verify system adherence to baseline security configurations and document deviations via the change control process.
• Conduct account reviews to ensure authorized access and maintain the principle of least privilege.
• Manage software reviews to ensure supported operating system and application versions. Coordinate remediation with responsible teams.
• Respond to security alerts (including outside normal business hours), perform initial triage, documentation, and escalation of potential security incidents.
• Document & Support (40% Effort)
• Prepare monthly reports on non-compliance for security-related issues.
• Review security exception requests from various departments.
• Monitor the security ticketing queue to ensure timely ticket resolution.
• Update, maintain, and document security controls and procedures.
• Provide direct support to clients and internal IT groups for security-related issues.
• Training & Other (20% Effort)
• Facilitate periodic security awareness training and phishing simulations for staff.
• Act as a security advocate by meeting regularly with IT teams and stakeholders to discuss security issues.
• Support the Security Analyst II and cross-train to provide coverage during SA II absence.
• Evaluate security products, services, and procedures to enhance productivity and effectiveness.
• Other duties as assigned.

Requirements & Tech Stack

• Information Technology (IT) related experience.
• Ability to maintain the security and integrity of critical infrastructure, including communications systems, computer networks and systems, cybersecurity systems, electrical grid, hazardous waste treatment system, or water treatment system.

Qualifications

• Bachelor’s degree in an applicable field.
• Four (4) months of related experience.
• Additional experience may substitute for the minimum requirement:
• High School Diploma or GED and four (4) years and four (4) months of related experience.
• Associate's degree and two (2) years and four (4) months of related experience.

Preferred Qualifications

• CompTIA Security+ Certification, Certified Information Systems Auditor (CISA), or ISC2 Associate Certification.
• Knowledge of working with students, faculty, staff, and researchers in an environment governed by Family Educational Rights and Privacy Act (FERPA).