Incident Response Analyst II Information Technologist II

Working/Functional Title

Incident Response Analyst II

Position Summary

As a valued member of this team the Incident Response Analyst II will lead in incident handling vulnerability management and threat analysis and research. This role frequently interfaces with customers and stakeholders across the university. Professional development will move toward a specialization within incident response such as development/tooling network forensics or malware analysis. Participation in the on-call rotation is required.

Note: This position is hybrid and requiresat least 2days of workon campus.

The Incident Response Analyst II will perform on this team include but are not limited to:

• Incident Response & Investigation: Handles intake of reported incidents and serves as the primary responder for severity 1 and 2 security events. Provides analysis and specialized support during team-based investigation and response efforts. Serves as the backup tactical lead for senior analysis. Documents cases per team standard.
• Threat Intelligence & Analysis: Ongoing research and analysis of current and new threats against the technology of the University and internal actors. Collaborates with team to determine potential impacts IOCs detection methods response options. Works with security operations staff to implement detection and prevention measures.
• Provide eDicsovery: Provides digital forensics support services and fulfills data collection and preservation orders such as search warrants subpoenas litigation holds and FOIA requests. Acts as an independent resource and liaison to investigate analyze and respond to cyber incidents within the network environment or enclave.
• Advocate: Works with Security Operations and Governance Risk and Compliance staff to implement detection and prevention measures. Coordinates with other departments and entities as needed in service of keeping awareness up and communication open.
• Legal Retention Support: Executes legal hold enforcement and maintenance per the direction of the University Council.

Michigan State University (MSU) is ranked #29 among public universities and #64 overall in U.S. News & World Reports Americas Best Colleges 2026. Located in East Lansing three miles east of the states capital the MSU community includes more than 12000 faculty academic and support staff as well as over 51000 students. MSU offers an extensive benefits package to its employees including health care prescription and dental coverage and a base retirement program with a University matching contribution as well as basic life addition MSU offers educational benefits including a course fee courtesy program and educational assistance.

MSU Information Technology provides the primary leadership for strategic financial and policy initiatives affecting information technology (IT) across MSU. MSU IT offers technology resources that support MSUs mission of providing education conducting research and advancing engagement.

Minimum Requirements

Knowledge equivalent to that which normally would be acquired by completing a four-year college degree program; three to five years of related and progressively more responsible or expansive work experience in information technology risk and/or compliance; or security administration and operations or incident response or an equivalent combination of education and experience.

Desired Qualifications

• Incident Response experience and
• Experience working with security technologies such as: Intrusion Detection & Prevention Systems Firewalls Log Analysis/SIEM Antivirus or Endpoint Protection etc

Or

• Experience in digital forensics and eDiscovery
• Relevant certifications desired but not required; e.g. GYPC GCFE GCFA CISSP
• Strong experience in one or more scripting languages desired but not required; e.g. Bash Python Powershell

Equal Employment Opportunity Statement

All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin citizenship age disability or protected veteran status.

Required Application Materials

Resume and cover letter

Special Instructions

Please provide three professional references who are knowledgeable of your work.

Work Hours

STANDARD 8-5

Website

Remote Work Statement

MSU strives to provide a flexible work environment and this position has been designated as remote-friendly. Remote-friendly means some or all of the duties can be performed remotely as mutually agreed upon.

Bidding eligibility ends November 3 2026 at 11:55 PM

Required Experience:

IC