Information Security Analysts

The Utah Education Network (UEN) keeps Utah’s K-12 schools connected through reliable, statewide internet service. In collaboration with the Utah Cyber Center, UEN is facilitating the Education Security Services program which provides K-12 schools with cybersecurity resources, incident response support, and breach coordination services. As an Information Security Analyst, you’ll play a key role in protecting Utah’s education community by monitoring security systems from unauthorized users, and identifying, reporting, and resolving security incidents.

Information Security Analysts Monitor, analyze, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security. Conduct vulnerability assessments and monitor systems, network, databases, and Web for potential system breaches / intrusions. Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs. Respond to alerts from information security tools. Report, investigate, and resolve security incidents. Educate and communicate security requirements and procedures to all users and new employees. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends, new methods, and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach. Ensure compliance with regulations and privacy laws. May oversee internal or external systems security (i.e. cloud services).

Learn more about the great benefits of working for University of Utah: benefits.utah.edu

The department may choose to hire at any of the below job levels and associated pay rates based on their business need and budget.

Responsibilities Threat detection and threat hunting activities across large datasets, involving multiple sources. Incident response handling for detected incidents, and coordination of incident response activities. Security control implementation across multiple organizations. Mentor other data security analysts. Develop incident response automations and workflows. Conduct state-wide training and security briefings for education organizations. Assisting local education agencies meet minimum cybersecurity standards., Information Security Analyst, I Monitor, analyze, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security. Conduct vulnerability assessments and monitor systems, network, databases, and Web for potential system breaches / intrusions. Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs. Respond to alerts from information security tools. Report, investigate, and resolve security incidents. Educate and communicate security requirements and procedures to all users and new employees. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends, new methods, and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach. Ensure compliance with regulations and privacy laws. May oversee internal or external systems security

(i.e. cloud services). Requires basic skill set and proficiency. Conducts work assignments as directed. Closely supervised with little latitude for independent judgment.Requires a bachelor’s (or equivalency) + 2 years of directly related work experience or a master’s (or equivalency) degree.This is an Entry-Level position in the General Professional track.Job Code: P34211Grade: P14 Information Security Analyst, IIMonitor, analyze, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security. Conduct vulnerability assessments and monitor systems, network, databases, and Web for potential system breaches / intrusions. Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs. Respond to alerts from information security tools. Report, investigate, and resolve security incidents. Educate and communicate security requirements and procedures to all users and new employees. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends, new methods, and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach. Ensure compliance with regulations and privacy laws. May oversee internal or external systems security (i.e. cloud services). Requires moderate skill set and proficiency in discipline. Conducts work assignments of increasing complexity, under moderate supervision with some latitude for independent judgment.Requires a bachelor’s (or equivalency) + 4 years or a master’s (or equivalency) + 2 years of directly related work experience.This is a Developing-Level position in the General Professional track.Job Code: P34212Grade: P17 Information Security Analyst, IIIMonitor, analyze, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security. Conduct vulnerability assessments and monitor systems, network, databases, and Web for potential system breaches / intrusions. Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs. Respond to alerts from information security tools. Report, investigate, and resolve security incidents. Educate and communicate security requirements and procedures to all users and new employees. Recommend and implement changes to enhance systems security and prevent unauthorized access. Research security trends, new methods, and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach. Ensure compliance with regulations and privacy laws. May oversee internal or external systems security (i.e. cloud services). Considered highly skilled and proficient in discipline. Conducts complex, important work under minimal supervision and with wide latitude for independent judgment.Requires a bachelor’s (or equivalency) + 6 years or a master’s (or equivalency) + 4 years of directly related work experience.This is a Career-Level position in the General Professional track.Job Code: P34213Grade: P19, EQUIVALENCY STATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor’s degree = 4 years of directly related work experience). Department may hire employee at one of the following job levels: Information Security Analyst, I: Requires a bachelor’s (or equivalency) + 2 years of directly related work experience or a master’s (or equivalency) degree. Information Security Analyst, II: Requires a bachelor’s (or equivalency) + 4 years or a master’s (or equivalency) + 2 years of directly related work experience. Information Security Analyst, III: Requires a bachelor’s (or equivalency) + 6 years or a master’s (or equivalency) + 4 years of directly related work experience.

Preferences

• Solid understanding of cybersecurity frameworks and best practices.
• Solid understanding of dynamic threat landscapes and their compensating controls.
• Demonstrated capability to analyze large datasets for security threats.
• Demonstrated ability to communicate complex risks to stakeholders.
• Experienced systems administration for enterprise services.
• Demonstrated ability to lead and mentor a team of data security analysts
• Familiar with standard concepts, practices, and procedures of cybersecurity monitoring.
• Experienced in planning and accomplishing goals.
• Experienced in leading and mentoring others.