Information Security Analyst I

Information Security Analyst I

The Information Security Analyst I reports to the Director of Information Security Operations. You will be an important member of the Security Operations Center (SOC) team responsible for threat detection, monitoring, and incident response in a multifaceted enterprise technology ecosystem. You will be responsible for performing security investigations, performing analysis of information security events in a large-scale enterprise ecosystem, and assisting with information security incidents to ensure the protection of SNHU's mission-critical technology resources and institutional information.

You will work 100% remotely from any of our approved states.

What You'll Do:

• Respond and perform analysis on security alerts and incidents.
• Support technical investigations of complex or high-severity security threats or incidents.
• Coordinate information security incident response with SNHU's Information Security Incident Response Plan.
• Support the incident response lifecycle and have the analytical mindset needed when it comes to escalated investigations and investigations into novel security incidents.
• Participate in incident containment and eradication activities like endpoint isolation, malware remediation, forensic analysis, malware analysis, community member interviews, and network traffic analysis.
• Work cross-functionally across ITS and all SNHU teams to provide support, guidance, and technical implementations where appropriate, to include triage, containment, and remediation when applicable.
• Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, incident timelines, and attack vector(s).
• Conduct real-time monitoring of security events from multiple sources and use analytical and critical thinking skills to identify, triage, analyze, investigate, and escalate information security events and alerts.
• Help perform investigations in complex or high-severity security threats or incidents.
• Communicate with partners, in a non-technical manner, at all organizational levels as part of incident response and remediation activities.
• Review and help implement standard operational processes for handling common incident types.
• Demonstrate a deep source of ethics, integrity, and confidentiality.
• Can remain calm and function at the highest level during a crisis.

What We're Looking For:

• 2+ years working in a security operations center (SOC), a cybersecurity operations center or on a cybersecurity incident response team.
• Bachelor's degree
• Professional Certification(s): CySA+, Sec+, or relevant certification.
• Understanding of MITRE ATT&CK Framework, Cyber Kill Chain, and cloud security principles.
• Familiarity with basic SIEM technology or EDR tools.
• Experience with IT networking.
• Experience with cloud security.
• Experience with Search Processing Language (SPL) or Kusto Query Language (KQL) with an ability to create complex queries for log analysis and security monitoring.
• Experience with enterprise security tools like Splunk, Tenable, Proofpoint tools, Microsoft Defender components, Office 365 tools, PowerShell, and multiple network tools.
• Experience with Cloud Platforms (Azure), security controls, and assessment techniques.

Work Environment and Physical Requirements:

Office Hours: Monday through Friday 8:00am – 4:30pm

Professional office environment. Sedentary work: Requires remaining in a stationary position, often standing or sitting for prolonged periods.

Compensation

The annual pay range for this position is $64,283.00 - $102,872.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $71,033.00 - $96,103.00.

Exceptional benefits (because you're exceptional)

You're the whole package. Your benefits should be, too. As a full-time employee at SNHU, you'll get:

• High-quality, low-deductible medical insurance
• Low to no-cost dental and vision plans
• 5 weeks of paid time off (plus almost a dozen paid holidays)
• Employer-funded retirement
• Free tuition program
• Parental leave
• Mental health and wellbeing resources