Information Security Analyst I

Department:

Information Security Administration

-----

Information Security Fusion Center

Position Title:

Information Security Analyst I

Job Family Group:

Professional Staff

Job Description Summary:

The Information Security Analyst (ISA) is a member of the Information Security (IS) team and supports the operation of KUMCs information security program. This includes a primary focus on detecting and preventing information security and cyber threats to the organization by correlating data to identify weaknesses within infrastructure including software hardware and networks and implementing measures to protect information assets.

The analyst is responsible for initial response to and troubleshooting cybersecurity networking and endpoint incidents; operational ticket-based work; front line monitoring of network devices data center equipment and other enterprise information security architecture items; as well as risk reviews for new technology and security exceptions.

The ISA is responsible for day-to-day operational security tasks. This individual helps guide our security operations program. The ISA participates in the identification tracking and monitoring of information security threats and service operations. The analyst utilizes established processes and tools for incident response threat identification analysis and remediation. This position participates in the implementation and integration of risk management procedures.

Job Description:

Job Duties:

• Perform real-time security log and event analysis and take action within defined parameters to contain and mitigate threats and escalate based upon severity.

• Review and analyze security events determine severity and author reports detailing the activity.

• Develop and maintain security operations documentation including procedures playbooks escalation paths and incident records.

• Develop strategies and plans with leadership to enforce security requirements and address identified risks.

• Detect and report residual risks vulnerabilities and other security exposures to IS management including misuse of information assets and noncompliance.

• Review security authorization and exception requests provide risk-based recommendations and escalate requests that exceed established approval authority.

• Monitor reports and security logs for unusual events. Investigate events and data to determine appropriate resolution. Research and assess new threats and security alerts and recommend remedial actions.

• Monitor KUMCs networks for security breaches and investigate violations.

• Monitor intrusion detection and prevention systems network vulnerability systems antivirus and encryption systems.

• Respond to and escalate events and maintain documented monitoring and response processes.

• Analyze log files from a variety of source systems to construct the narrative of a security incident.

• Support information security incident management activities including triage investigation containment remediation recovery documentation and post-incident review.

• Provide frontline support and guidance to IT support staff and users on security issues.

• Establish and maintain business and technical relationships with internal and external stakeholders.

• Provide implementation guidance and user support for security technologies controls and procedures.

This job description is not designed to cover or contain a comprehensive listing of activities duties or responsibilities that are required of the employee for this job. It is only a summary of the typical functions of the job not an exhaustive list of all possible job responsibilities tasks duties and assignments. Furthermore job duties responsibilities and activities may change at any time with or without notice.

Work Environment:

• Must be available to participate in an on-call rotation schedule.

• May be required to work outside normal business hours including nights weekends and holidays to support incident response activities.

• This position is eligible for a hybrid work arrangement with in-person work required at least one day a week and at other times based on operational or incident-response needs.

Required Qualifications
Work Experience:

• Two (2) years experience in information security computer science engineering telecommunications systems administration or related technical field. Relevant education may be substituted for experience on a year for year basis.
• One (1) year of progressive work experience in information technology or information security.
• Experience working with networking architectures topologies practices and technologies.
• Experience handling information involving privacy and confidentiality and applying appropriate judgment in its use and disclosure.
• Experience providing technical support or security guidance to customers users or stakeholders.

Preferred Qualifications
Education: Bachelors degree in information security computer science engineering telecommunications systems administration or another related technical field.
Certifications/Licenses:

• CompTIA Network CompTIA Security (ISC)2 SSCP or EC-Council ECSA certification or an equivalent certification.
• ITIL Foundations certification or higher.

Work Experience:

• Experience with endpoint security tools.
• Related work experience in a higher education or academic health care organization.
• Experience with SIEM technologies.

Skills

• Problem solving

• Communication

• Organization

• Collaboration

• Attention to detail

• Interpersonal skills

• Time management

• Multitasking

• Customer service

Comprehensive Benefits Package:

Coverage begins on day one for health dental and vision insurance and includes health expense accounts with generous employer contributions if the employee participates in a qualifying health plan. Employer-paid life insurance long-term disability insurance and various additional voluntary insurance plans are available. Paid time off including vacation and sick begins accruing upon hire plus ten paid holidays. One paid discretionary day is available after six months of employment and paid time off for bereavement jury duty military service and parental leave is available after 12 months of employment. A retirement program with a generous employer contribution and additional voluntary retirement programs (457 or 403b) are available.

Required Experience:

IC

]]>