Security Analyst

Job Title: Security Analyst

Job Status: 1 Temporary (until December 31, 2026), Existing position vacancy

Team: Information Technology

Reports to: Team Lead, Information Privacy & Security

Job Level: 7

Identifies and investigates security breaches and infrastructure threats through continuous monitoring, determines potential risks and performs steps for containment and corrective action to fix detected vulnerabilities.

• Investigates and documents security breaches and other cyber security incidents, and assesses the damage they cause; works with Technology team to perform tests and uncover network vulnerabilities; fixes detected vulnerabilities to maintain a high-security standard.
• Defines enterprise level security process and actively enforces procedures; trains employees to understand security and implement the right strategies.
• Performs risk analysis to identify any security issues that could lead to lost or stolen data; conducts penetration testing and monitoring of current digital assets; updates continuously the company’s incident response and disaster recovery plans.
• Verifies the security of third-party vendors and collaborates to ensure they meet the College’s security requirements.
• Performs security event monitoring and management utilizing Information Protection / IT security principles, threat and risk assessment methodology, practices, procedures and tools (e.g., government privacy and security-related legislation and policies, biometric and cryptographic principles, firewalls, intrusion logs, encryption and digital [numeric] signature).
• Conducts data loss prevention (DLP) log review, collection, analysis and dissemination of Threat Intelligence feeds, Vulnerability Management and tracking; provides support for 3rd party Penetration Testing, IPS log review and tuning, and Security Information and Event Management (SIEM) event response.

Education and Experience

• Bachelor’s degree in Computer Science, Computer Engineering or a software related discipline.
• 10 years of prior relevant experience, with experience on vulnerability scanning solutions and any of the following:
  Security Information and Event Management (SIEM) systems, Intrusion detection/prevention systems (IDS/IPS), Public key infrastructure (PKI), Identity and Access management (IDAM) systems, Antivirus and firewalls, Endpoint detection and response (EDR), Security automation and orchestration.
• Hands-on experience analyzing high volumes of logs, network data, and other attack artifacts in support of incident investigations.
• Experience with Azure, AWS or other Cloud-based PaaS/SaaS environments.
• Certifications:
  • Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification.
  • Hold DoD-8570 IAT Level 2 baseline certification (Security+ CE or equivalent).
• Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
• Detailed technical knowledge of techniques, standards and state-of-the-art capabilities for authentication and authorization, applied cryptography, security vulnerabilities and remediation.
• In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. App Dynamics, Elastic Search, Splunk).
• Up-to-date understanding of the source code programming languages, such as C#, C++, Java, Perl, and Python.
• Familiarity with the DOD Information Assurance Vulnerability Management program.
• Proficiency with any of the following:
  Anti-Virus, HIPS, /PS, Full Packet Capture, Host-Based Forensics, Network Forensics, and RSA Security.
• Understanding of VMware technology.
• Demonstrated understanding of Algorithms, Data Structures, Object Oriented Design, Databases (SQL / No
  
  SQL).

• Innovation – Curiously cultivate new ideas with a desire to learn and a collective focus on the best outcome.
• Integrity – Conduct every interaction with fairness, honesty, and mutual respect.
• Collaboration – Work with the right people at the right time to make the best-informed decision.
• Well-being – Care for…