IT Statewide Infosec Analyst

McNeese State University is seeking an IT Statewide Infosec Analyst to strengthen enterprise security operations through the Office of Technology Services (Information Security Team). In this onsite Baton Rouge role, you will monitor and investigate real-time cyber threats, coordinate incident response activities, and provide technical support across enterprise systems, applications, and networks.

What you'll do

• Monitor, triage, and investigate real-time security alerts from Palo Alto Networks Cortex XSIAM and CrowdStrike Falcon Complete .
• Validate high-priority threat notifications, assess context, and perform initial containment steps aligned with enterprise incident response playbooks.
• Coordinate remediation workflows with the CrowdStrike Falcon Complete managed service team and relevant OTS technical verticals.
• Document findings, root cause analyses , and response actions in the centralized security incident log.
• Assist with tuning detection logic, correlation rules, and automated response playbooks in Cortex XSIAM to reduce false positives.
• Monitor and manage the ServiceNow ticket queue for proxy-related issues, access requests, and URL reclassification items.
• Troubleshoot web filtering and related concerns including SSL/TLS decryption exceptions and secure web gateway (SWG) connection anomalies.
• Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or evasion attempts.
• Maintain operational documentation and SOPs for enterprise proxy management and ticket workflows.
• Investigate suspicious internal and perimeter network traffic, protocol anomalies, and anomalous host behaviors using network telemetry and log sources.
• Perform proactive threat hunting using threat intelligence indicators ( IoCs ) and behavioral analytics to identify potential adversary activity ( TTPs ).
• Correlate disparate logs (firewall, DNS, VPN, authentication, and endpoint logs) to reconstruct attack timelines and assess impact scope.
• Escalate confirmed intrusions and APTs to senior incident response personnel and OTS leadership.
• Monitor identity provider signals and behavioral analytics for compromised credentials, impossible travel, and unauthorized account modifications.
• Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
• Verify post-compromise cleanup by identifying and purging persistent access mechanisms such as malicious inbox forwarding rules and unauthorized OAuth applications.
• Advise agency points of contact and help desk personnel on user remediation best practices and credential hygiene.
• Perform other tasks, special projects, analyses, studies, and plans as directed by OTS Leadership.

Requirements

• Four years of experience in information technology; OR
• Six years of full-time work experience in any field plus two years of experience in information technology; OR
• An associate’s degree in information technology plus two years of experience in information technology; OR
• A bachelor’s degree plus two years of experience in information technology; OR
• A bachelor’s degree with twenty-four semester hours in an information technology, computer science, engineering, mathematics, or business analytics field plus one year of experience in information technology; OR
• A master’s degree plus one year of experience in information technology.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

Experience substitution: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience towards the six years of full-time work experience in any field (maximum substitution allowed is 120 semester hours which substitutes for a maximum of four years of experience in any field).

Technology you'll work with

• Palo Alto Networks Cortex XSIAM
• CrowdStrike Falcon Complete
• ServiceNow
• SSL/TLS , Secure web gateway (SWG)
• Firewall, DNS, VPN, authentication, endpoint logs
• IoCs , TTPs , OAuth

Position details

• Appointment Type: Filled by new hire or by promotion of a current permanent status classified employee.
• Career Progression: Part of a career progression group and may be filled as an IT Statewide Infosec Analyst 1 or 2.

For further information , contact Erica R. Gay, HR Specialist, Division of Administration/Office of Human Resources at View email address on click.appcast.io .