> Markdown version of [/jobs/ext/4149131-incident-response-analyst-ii-information-technologist-ii](https://www.wearedevelopers.com/jobs/ext/4149131-incident-response-analyst-ii-information-technologist-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Incident Response Analyst II / Information Technologist II

- **Company:** Michigan State University
- **Location:** East Lansing, MI, United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Antivirus Softwares, Bash Shell, Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Network Forensics, Windows PowerShell, Security Information and Event Management, Software Vulnerability Management, Scripting, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Information Technology
- **Published:** October 27, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6abacfc5b23e686a

## About the Role

Knowledge equivalent to that which normally would be acquired by completing a four-year college degree program; three to five years of related and progressively more responsible or expansive work experience in information technology, risk, and/or compliance; or security administration and operations, or incident response, or an equivalent combination of education and experience., * Incident Response experience and

 * Experience working with security technologies such as: Intrusion Detection & Prevention Systems, Firewalls, Log Analysis/SIEM, Antivirus or Endpoint Protection etc

Or

 * Experience in digital forensics and eDiscovery
 * Relevant certifications desired but not required; e.g. GYPC, GCFE, GCFA, CISSP
 * Strong experience in one or more scripting languages desired but not required; e.g. Bash, Python, Powershell

## Description

As a valued member of this team, the Incident Response Analyst II will lead in incident handling, vulnerability management, and threat analysis and research. This role frequently interfaces with customers and stakeholders across the university. Professional development will move toward a specialization within incident response such as development/tooling, network forensics, or malware analysis. Participation in the on-call rotation is required.

Note: This position is hybrid and requires at least 2 days of work on campus.

The Incident Response Analyst II will perform on this team include but are not limited to:

 * Incident Response & Investigation: Handles intake of reported incidents and serves as the primary responder for severity 1 and 2 security events. Provides analysis and specialized support during team-based investigation and response efforts. Serves as the backup tactical lead for senior analysis. Documents cases per team standard.
 * Threat Intelligence & Analysis: Ongoing research and analysis of current and new threats against the technology of the University and internal actors. Collaborates with team to determine potential impacts, IOCs, detection methods response options. Works with security operations staff to implement detection and prevention measures.
 * Provide eDicsovery: Provides digital forensics support services and fulfills data collection and preservation orders such as search warrants, subpoenas, litigation holds, and FOIA requests. Acts as an independent resource and liaison to investigate, analyze, and respond to cyber incidents within the network environment or enclave.
 * Advocate: Works with Security Operations and Governance Risk and Compliance staff to implement detection and prevention measures. Coordinates with other departments and entities as needed in service of keeping awareness up and communication open.
 * Legal Retention Support: Executes legal hold enforcement and maintenance per the direction of the University Council.