🚀 Senior Security Analyst

GENERAL SUMMARY

The Senior Security Analyst is responsible for keeping the University safe and secure, and monitors all aspects of data security, with respect to information systems that stores and transmits data that traverses across University assets. This includes ensuring that all information systems are up to date, monitored, and vulnerabilities are remediated.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Collaborate with University IT teams and departments to identify areas of risk to the organization and assist with reducing those risks to acceptable levels.
• Coordinate with systems administrators, developers, and other teams to embed best practices in design and development.
• Ensure network and computing systems devices are up to date with latest versions of software and patches.
• Ensure that all systems are resilient to cyber events using the Security Information and Event Management (SIEM) tool (SumoLogic).
• Manage inbound and outbound security rules for email (filtering, whitelists, spam, etc.) (ProofPoint).
• Participate in quarterly audit reporting, including reports to leadership and external compliance entities.
• Conduct, monitor, evaluate, and report Key Performance and Key Risk Indicators (KPIs and KRIs) to provide leadership with accurate and timely information regarding the effectiveness of the information security strategy.
• Gather and analyze University data to ensure actionable information is available and responded to in accordance with defined SLAs.
• Communicate and promote the awareness of information security, information risk, and privacy to business units, customers, and partners.
• Build and maintain a comprehensive vulnerability testing and reporting schedule. This includes actively threat hunting to identify vulnerabilities within University assets and building a plan for remediation of vulnerabilities using CrowdStrike Spotlight.
• Monitor, implement and enforce IT Security policies and procedures.

OTHER DUTIES AND RESPONSIBILITIES

May perform other duties and responsibilities that management may deem necessary from time to time.

POSITION IN ORGANIZATION

Reports to: Exec Director, IT Customer Solutions

Positions Supervised: None

EDUCATION and/or EXPERIENCE

• 4 years of experience and strong knowledge of back up services (cloud and physical).
• 4 years of contract negotiation and management skills.
• 6 years of experience working with information systems, computing, and networks.
• 6 years working knowledge of Windows, Linux, and MacOS CLI.
• Strong understanding and/or experience with NIST Cybersecurity Framework, Cybersecurity Policy Management, Security Information and Event Management (SIEM), vulnerability management, penetration testing, authentication methods, Identity and Access Management (IAM), anti-malware and malware analysis/remediation, Endpoint Detection Response (EDR/XDR), Intrusion Detection and Intrusion Prevention Systems (IDS/IPS), web application firewalls, File Integrity Monitoring (FIM), incident response/forensics, physical access controls and security best practices

• Understand security & policy configurations in Office 365.
• Ability to understand firewall and network configurations (Meraki).
• Advanced understanding of Microsoft product suite; Microsoft certifications preferred.
• Ability to work collaboratively as part of a team, and to interact effectively with colleagues, administrators, faculty, staff and students as well as external constituencies.
• Excellent written and verbal communication skills and a proactive mindset.
• Ability to a work a flexible schedule, including evenings.

TRAVEL

Up to 20% travel required to campus locations in the U.S.

WORK LOCATION

This is a campus-based position located at a University of St. Augustine for Health Sciences campus. This position follows a hybrid work schedule requiring a minimum of three (3) days on campus.

BUSINESS COMPETENCIES

• Collaborates - Building partnerships and working collaboratively with others to meet shared objectives.
• Being Resilient - Rebounding from setbacks and adversity when facing difficult situations.
• Instills Trust - Gaining the confidence and trust of others through honesty, integrity, and authenticity.
• Drives Results - Consistently achieving results, even under tough circumstances.
• Innovation - Creating new and better ways for the organization to be successful.
• Customer Focus - Building strong customer relationships and delivering customer-centric solutions.

WORK ENVIRONMENT

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle, or feel; and talk or hear. The employee frequently is required to stand and walk. The employee is occasionally required to reach with hands and arms and stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 40 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Work involves operation of personal computer equipment for six to eight hours daily and includes physical demands associated with a traditional office setting such as communicating and other physical functions as necessary.

#J-18808-Ljbffr