> Markdown version of [/jobs/ext/238872-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/238872-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst

- **Company:** Southern Utah University
- **Location:** Cedar City, UT, United States
- **Salary:** $74,000.0 - $85,000.0
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Cyber Security, Identity and Access Management, Virtual Private Networks (VPN), Open Source Technology, Security Information and Event Management, Data Logging, Firewalls (Computer Science), CIS Benchmarks, Vulnerability Analysis
- **Published:** May 15, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=ea29c1cbbe37cf8d

## About the Role

Do you have experience in Research?

## Description

Southern Utah University (SUU) invites applications for the position of Information Security Analyst. Reporting to the Chief Information Security Officer, this role is a cornerstone of the Information Security Office, responsible for the development, maintenance, and fine-tuning of the infrastructure that protects our university's digital landscape.The Information Security Analyst is an integral member of a centralized IT team that balances high-level enterprise security products with agile, open-source projects. We are looking for a technically-minded professional who enjoys "getting under the hood" of security tools-someone who can automate a cleanup process, fine-tune a SIEM alert, and explain the "why" behind a security policy to a faculty member with equal skill. Whether you are a seasoned analyst or a technical IT professional ready to specialize in security, this position offers the opportunity to defend a complex, meaningful environment while mentoring the next generation
of IT student professionals.

EXAMPLE OF DUTIES
Security Infrastructure & Tool ManagementImplement, maintain, and fine-tune security appliances, including Next-Generation Firewalls, VPNs, and Endpoint Detection and Response (EDR) platforms.Administer and optimize enterprise logging, email security, identity & access management, and other security related systems, ensuring alerts are actionable and high-value.Utilize scripting and automation to improve the efficiency of security tools and validate the effectiveness of security fixes.Monitoring, Analysis, & Incident ResponseMonitor system logs and alerts to identify, investigate, respond to, and document potential and known security incidents.Perform initial forensic analysis and research emerging threats to develop appropriate mitigations.Participate in the design and execution of vulnerability assessments and penetration tests.Governance, Risk, & ComplianceAssist in compliance efforts with federal and state regulations (e.g., PCI, FERPA, HIPAA).Conduct risk assessments of new
software and campus systems to ensure alignment with the CIS Controls framework.Assist in the development and auditing of campus security plans, policies, and incident response procedures.Mentorship & OutreachSupervise and mentor student employees, providing them with real-world experience in information security.Promote security best practices and assist in campus-wide security awareness training.Additional duties as assigned.

SUPPLEMENTAL INFORMATION
Along with the required documents, applicants must answer the additional questions to be consideredThis position is contingent on funding. Due to recent changes in H1B visa fees, Southern Utah University is no longer able to sponsor international faculty and staff that require an H1B visa and are currently living outside of the United States.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)