Information Security Analyst

Southern Utah University
Cedar City, UT, United States
3 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
$74,000.0 - $85,000.0
Working hours
Regular working hours
Job source

Tech stack

Agile Methodology Cyber Security Identity and Access Management Virtual Private Networks (VPN) Open Source Technology Security Information and Event Management Data Logging Firewalls (Computer Science) CIS Benchmarks Vulnerability Analysis

Job description

Southern Utah University (SUU) invites applications for the position of Information Security Analyst. Reporting to the Chief Information Security Officer, this role is a cornerstone of the Information Security Office, responsible for the development, maintenance, and fine-tuning of the infrastructure that protects our university’s digital landscape.The Information Security Analyst is an integral member of a centralized IT team that balances high-level enterprise security products with agile, open-source projects. We are looking for a technically-minded professional who enjoys “getting under the hood” of security tools-someone who can automate a cleanup process, fine-tune a SIEM alert, and explain the “why” behind a security policy to a faculty member with equal skill. Whether you are a seasoned analyst or a technical IT professional ready to specialize in security, this position offers the opportunity to defend a complex, meaningful environment while mentoring the next generation of IT student professionals.

EXAMPLE OF DUTIES Security Infrastructure & Tool ManagementImplement, maintain, and fine-tune security appliances, including Next-Generation Firewalls, VPNs, and Endpoint Detection and Response (EDR) platforms.Administer and optimize enterprise logging, email security, identity & access management, and other security related systems, ensuring alerts are actionable and high-value.Utilize scripting and automation to improve the efficiency of security tools and validate the effectiveness of security fixes.Monitoring, Analysis, & Incident ResponseMonitor system logs and alerts to identify, investigate, respond to, and document potential and known security incidents.Perform initial forensic analysis and research emerging threats to develop appropriate mitigations.Participate in the design and execution of vulnerability assessments and penetration tests.Governance, Risk, & ComplianceAssist in compliance efforts with federal and state regulations (e.g., PCI, FERPA, HIPAA).Conduct risk assessments of new software and campus systems to ensure alignment with the CIS Controls framework.Assist in the development and auditing of campus security plans, policies, and incident response procedures.Mentorship & OutreachSupervise and mentor student employees, providing them with real-world experience in information security.Promote security best practices and assist in campus-wide security awareness training.Additional duties as assigned.

SUPPLEMENTAL INFORMATION Along with the required documents, applicants must answer the additional questions to be consideredThis position is contingent on funding. Due to recent changes in H1B visa fees, Southern Utah University is no longer able to sponsor international faculty and staff that require an H1B visa and are currently living outside of the United States.

Requirements

Do you have experience in Research?

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:01 min

Bridging the gap between software development and security

Vandana Verma · LIVE

2:15 min

Auditing container configurations against CIS benchmark security standards

Madhu Akula · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:10 min

Exposing sensitive information through partial search logs

Dennis Schulz Dennis Schulz +1 · WWC Europe 2026

3:39 min

Validating data queries and infrastructure security configurations

Philipp Krenn · WWC 2023

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all