Information Security Analyst III

The Information Security Analyst III is the senior lead for the Security Operations Center (SOC) team and is responsible for monitoring a large, complex enterprise technology ecosystem, detecting, analyzing, and investigating information security events within that ecosystem, and responding to information security incidents to ensure the protection of SNHU’s mission critical technology resources and institutional information.

The critical duties and responsibilities of the SOC team must continue to be performed during crisis situations and contingency operations, which may necessitate extended hours of work, and/or require work during non-business hours.

You will work 100% remotely from any of our approved states. #LI-Remote

What You’ll Do:

• Incident Response
• Act as the senior escalation point for security alerts and incidents triaged by level I and II analysts.
• Act as Incident Coordinator in alignment with SNHU’s Information Security Incident Response Plan.
• Act as technical lead for investigation of complex or high severity security threats or incidents.
• Lead, define, and authorize incident containment and eradication activities like endpoint isolation, malware remediation, forensic analysis, malware analysis, community member interviews, and network traffic analysis.
• Understand the incident response lifecycle and possess the analytical mindset needed when it comes to escalated investigations and investigation into novel security incidents.
• Work cross-functionally across ITS and all SNHU business units to provide support, guidance, and technical implementations where appropriate, to include triage, containment, and remediation when applicable.
• Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, incident timelines, and attack vector(s).
• Remain calm and function at the highest level during a crisis.
• Detection Engineering
• Develop SIEM alerts, reports, and dashboard content to enhance detection coverage and increase the efficiency and effectiveness of level I and II analysts.
• Partner with other ITS and business partners to develop and maintain monitoring content relevant to their use cases related to academic integrity investigations, financial aid fraud, and system/network administration.
• Analyze, implement, and approve tuning of alert content and security tools.
• Remain up to date on emerging threat intelligence.
• Security Operations Engineering
• Serves as the Security Operations technical lead for ITS and enterprise-wide projects
• Develop strategies and solutions that remediate or mitigate the risks associated with threats identified during the incident response process and other programs such as vulnerability management, threat intelligence, and risk management.
• Identify, prioritize, and onboard log data pertinent for monitoring SNHU’s complex, virtualized, multi-site computing environment and expansive technology ecosystem.
• Develop and implement logging baselines for operating systems, software applications, network infrastructure, cloud-based resources, security tools, and other technology resources.
• Develop and implement data pipelines for log data, ensuring compliance with log retention requirements while increasing SIEM efficiency.
• Implement, configure, deploy, and manage security operations tools (e.g. Splunk, Cribl, Halcyon, Microsoft Defender XDR, Tenable).
• Develop and maintain automation scripts and other tools to enhance security operations efficiency and effectiveness.
• Vulnerability and Risk Management
• Enforce vulnerability remediation compliance standards
• Review and process false positive detections reported by remediation owners
• Perform risk analyses on software vulnerabilities and prioritize vulnerability remediation efforts
• Provide technical vulnerability remediation assistance to resource owners
• Generate and provide regular reporting to management on key Security Operations metrics related to incident response, continuous monitoring, and vulnerability management.
• Excel at documentation and detailed notetaking, including SOP writing, incident reporting, e-mail and instant messaging etiquette, and most importantly, documenting incident actions appropriately.
• Communicate with stakeholders, in a non-technical manner, at all organizational levels as part of incident response and remediation activities.
• Provide customer support in alignment with SNHU’s Core Values and understand how and when to appropriately escalate potential issues.

Other duties and responsibilities as assigned. Job duties and responsibilities can change at any time, with or without notice.

• 5+ Years of relevant or specific experience: in cybersecurity

4 + years working in a security operations center (SOC), a cybersecurity operations center or on a cybersecurity incident response team, and a minimum one year working in a mid to senior level in this capacity.

• Academic Degree(s) and/ areas of study: Bachelor’s degree in cybersecurity, information technology, data analytics, information assurance, computer science, or related field.

Equivalent of experience in lieu of degree acceptable

• Professional Certification(s): ISC2 CISSP; ISACA CISM or CISA; CompTIA CySA+, Security+, Network+, Microsoft AZ-900, SC-100, SC-200; SANS GIAC certifications such as GSEC, GCIH, and GSOC; and EC Council CEH, CPENT, and CIH.
• Experience collecting, organizing, and analyzing data gathered from firewalls, vulnerability scanners, Windows/Linux operating systems, software application logs, Azure cloud-resources, email platforms, Endpoint Detection and Response (EDR) tools, and other platforms in the environment that enable enterprise-wide security monitoring.
• Experience implementing, writing, deploying, and maintaining scripts used for security operations automation.

The annual pay range for this position is $106,684.00 - $170,727.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $117,887.00 - $159,493.00.

Exceptional benefits (because you’re exceptional)

You’re the whole package. Your benefits should be, too. As a full-time employee at SNHU, you’ll get:

• High-quality, low-deductible medical insurance
• Low to no-cost dental and vision plans
• 5 weeks of paid time off (plus almost a dozen paid holidays)
• Employer-funded retirement
• Free tuition program
• Parental leave
• Mental health and wellbeing resources, 94K-165K Annually Senior level 94K-165K Annually Senior level Healthtech * Insurance Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management. Top Skills: Access ManagementApplication SecurityAuthenticationAuthorizationComputer NetworkingData EncryptionIncident ResponseIpsecIt AuditMS OfficeNetwork SecuritySecurity Event MonitoringSecurity MonitoringServer SecuritySox ComplianceSslTcp/IpWindows Cloudera

Manager, Applied AI Strategy and Operations

An Hour Ago In-Office or Remote Denver, CO, USA 144K-162K Annually Senior level 144K-162K Annually Senior level Artificial Intelligence * Cloud * Software * Big Data Analytics Lead global commercial and operational initiatives to accelerate Private AI adoption. Establish governance and operating rhythms, run monthly business reviews, prioritize accounts and use cases, define strategic metrics, align ecosystem and commercial strategies, and build business cases and growth models to guide executive decision-making. Top Skills: Apache IcebergClariNvidia BlueprintsPower BISalesforceSQLTableauVast Apollo.io

Recruiter

An Hour Ago Easy Apply Remote United States Easy Apply 160K-180K Annually Senior level 160K-180K Annually Senior level Artificial Intelligence * Enterprise Web * Information Technology * Productivity * Sales * Software * Database Own full-cycle recruiting for mid- and senior-level G&A, Sales, and Marketing roles. Develop sourcing strategies, conduct structured interviews, lead calibrated debriefs, manage candidate pipelines, and advise hiring managers. Track funnel metrics, maintain Greenhouse data, influence stakeholders, coordinate offers with Finance, HR, and Compensation, and improve recruiting workflows through AI and automation. Top Skills: AIAutomationGemGreenhouse

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

Leads Security Operations Center activities, including incident response, complex threat investigations, detection engineering, SIEM development, security tooling, log pipeline management, vulnerability remediation, risk analysis, automation, and operational reporting. Serves as the senior escalation point and incident coordinator, leading containment and eradication while collaborating with technical and business stakeholders. The role is fully remote within approved states and may require extended or non-business hours during crises. The summary above was generated by AI

Southern New Hampshire University is a team of innovators. World changers. Individuals who believe in progress with purpose. Since 1932, our people-centered strategy has defined us - and helped us grow a team that now serves over 180,000 learners worldwide.

Our mission to transform lives is made possible by talented people who bring diverse industry experience, backgrounds and skills to the university. And today, we’re ready to expand our reach. All we need is you.

Make an impact - from near or far

At SNHU, you’ll have the option to work remotely in the following states: Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, New Hampshire, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin and Wyoming.

We ask that our remote employees have access to a reliable internet connection and a dedicated, properly equipped workspace that is free of distractions. Employees must reside in, and work from, one of the above approved states.