Cybersecurity Analyst

Job Description

Job Description:\n\nTitle: Cybersecurity Analyst\nPosition Type: Professional Tech Full time\nCollege: Front Range Community College\nDivision: Operations\nDepartment: FRCC Information Technology Services\nCampus: Boulder County Campus, Larimer Campus, Westminster Campus\nLocation: Longmont, CO; Fort Collins, CO; Westminster, CO\nSalary Range: $85,000 - $89,250 annually\n \nThis position has the opportunity to be based at any of our campuses located in Fort Collins, CO (Larimer Campus), Longmont, CO (Boulder County Campus), or Westminster, CO (Westminster Campus). Please select your campus(es) of interest in the application.\n \nWho We Are:\nWith three campuses along Colorado’s Front Range, FRCC is the state’s largest community college. We enroll close to 28,000 students annually from our diverse service area, which offers a variety of cultural and recreational activities.\nEach year approximately 5,000 FRCC students transfer to four-year universities and FRCC offers more than 36 career training programs that prepare students for immediate employment and rewarding careers. Last year, more than 5,000 high school students took concurrent enrollment classes with us, earning college credit without having to pay college tuition. And we were recently ranked as one of the “Top Online Colleges” in the country by Newsweek.\nOne of FRCC’s main goals is to offer educational excellence for everyone. The college’s strong commitment to student success means we start by creating an inclusive and equitable environment—one where both students and employees feel they belong and are supported. FRCC’s focus on diversity, equity and inclusion is woven into the fabric of our college conversations and decision-making processes. We are actively seeking to hire a workforce that reflects the diversity of our student body.\nThe college is also an emerging Hispanic Serving Institution. For us, becoming an HSI is an intentional commitment to being a college where our Latinx (and other historically marginalized) students thrive.\nFRCC employees and leaders work hard to create a culture of collaboration, innovation and pride. We’re looking to hire people who share these values—along with our commitment to student success, equity and excellence.\nJob Summary:\nThe Cybersecurity Analyst (CSA) is responsible for leading the day-to-day operations of securing FRCC’s various information systems to ensure confidentiality, integrity, and availability. Reporting to the AVP of IT, the CSA is tasked with providing technical expertise in all areas of network, system, and application security. The CSA works closely with the various teams in the System Office and various College Information Technology departments to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls. The CSA leads FRCC’s vulnerability management program and leads FRCC’s research and reporting on emerging threats. The CSA helps FRCC along with FRCC to take pre-emptive risk mitigation steps to prevent breaches and cyber disruptions to operations. The CSA effectively correlates and analyzes security events within the context of FRCC's and FRCC’s unique environment to proactively detect threats and respond to cyber incidents before the cyber incident causes a major disruption to operations. The CSA recommends cyber security procedure updates to the AVP of IT based on changing technology and cyber security trends.\nFront Range Community College's Information Technology department supports a 24/7 operational environment. As a result, this position may require occasional evening and weekend work to support system maintenance, cybersecurity incidents, upgrades, or other operational needs.\nThis position offers a hybrid work arrangement, with the opportunity to work remotely, subject to operational needs and supervisory approval. A strong on-campus presence is required, and the incumbent must be able to travel between all three FRCC campuses as needed to support departmental and institutional objectives.\nPlease note: You need to be a Colorado resident on your first day of employment. Also, Front Range Community College is an E-Verify employer.\nDuties & Responsibilities:\nCybersecurity Operations and Incident Response\n\n Leads the continuous monitoring of the college’s Information Technology environment to identify, analyze, and mitigate cybersecurity threats and vulnerabilities.\n Investigates, tirages, and responds to real-time cybersecurity alerts within the FRCC environment and facilitates remediation efforts in accordance with incident response procedures.\n Reviews and analyzes security logs and historical reporting data to identify indicators of compromise, investigate potential security incidents, and detect user activities that may result in security or compliance violations.\n Conducts vulnerability assessments of FRCC systems and networks with cybersecurity tools owned by FRCC or provided by the System Office.\n Leads the administration of enterprise firewalls, NAC (Network Access Control), EDR (End-point Detection and Response, also known as Anti-virus/Anti Malware), MFA (Multi-Factor Authentication), Vulnerability Scanners and Agents, and DNS security solutions, and other tools owned by the Information Security team.\n Provides technical expertise and consultation to IT staff, departmental stakeholders, and System Office partners regarding cybersecurity concepts, threat mitigation strategies, security bet practices, and the implementation of appropriate safeguards.\n Monitors compliance with institutional and CCCS cybersecurity procedures and standards by identifying areas of noncompliance, recommending corrective actions, and partnering with departments to strengthen adherence to established cybersecurity practices.\n Collaborates with all IT personnel, college departments, public safety, senior leadership and the System Office representatives to coordinate cybersecurity activities, support incident response efforts, and address emerging security risks affecting the institution.\n Promotes information security awareness across FRCC by supporting security education efforts, communicating emerging threats and vulnerabilities, and encouraging behaviors that reduce institutional risk and strengthen the overall security of IT systems.\n Develops and maintains documentation related to cybersecurity incidents, investigations, response activities, and security control administration to support operational continuity, compliance requirements, and continuous improvement initiatives.\n\nSecurity Administration and Technology Management\n\n Monitors online security-related resources for new and emerging cyber threats and trends that may impact the College’s information technology environment. Assesses potential risks and recommends appropriate mitigation strategies.\n Documents, reviews, and validates firewall access control rules and verifies the access control with the appropriate management entity to ensure access is appropriately authorized.\n Develops and maintains documentation related to information security tools, technologies, configurations, procedures, and operational processes to support knowledge transfer, consistency, and business continuity.\n Stays current on emerging technologies.\n Administers and maintains all service accounts across the FRCC environment, ensuring accounts are managed according to established they are house in a secure system.\n\nCompetencies/KSAs:\n\n Project Management: Juggles many projects at a time and know how to establish priorities.\n Customer Service: Addresses customer concerns in a professional courteous and timely manner. Provides escalation support for major incidents\n Communication: Communicates effectively with individuals from diverse backgrounds and chooses words carefully in communication. Presents oneself clearly and articulately when speaking to ensure that others fully comprehend the intended message.\n Attention to Detail: Thorough in accomplishing a task. Plans and organizes time and resources efficiently. Mindful without being paralyzed by analysis.\n Continuous Learning: Demonstrate eagerness for continuous improvement around technical knowledge and skills. Stays informed on emerging cybersecurity trends with the desire and drive upskill as necessary.\n Technical Skills: Working knowledge of installation, configuration, testing, modification, maintenance, troubleshooting, repair, monitoring and support of cybersecurity systems.\n Flexibility: Multitasks with the ability to change direction quickly when needed. Thinks iteratively with a continual improvement mindset\n Professionalism: Maintains confidentiality and discretion, works independently with minimal direction.\n Mission, Vision & Values: Embraces the mission, vision and values of FRCC. Understands the importance of the work that you do to support institutional goals.\n Relationship Building: Maintains and fosters relationships of the department and takes opportunities to listen for improvement to improve services.\n Equity Mindedness: Works with employees and students while incorporating equity, diversity, and inclusive excellence which will support the goals of FRCC and help them feel they belong. Learns to view department operations through an equity lens. Calls attention to processes that lead to inequity in serving students. Understands the College's equity goals and how your role supports FRCC's ability to achieve those goals.\n Collaboration: Works with colleagues across departments to find innovative solutions.\n Data Usage: Reviews data within the department, paying attention to what it shows about our performance and its impact on productivity. Works with their supervisor to brainstorm changes that can be implemented to improve a program or service that the department provides.\n Cultural Self-Awareness: Willing to examine their own beliefs and acknowledge their own biases and how they have impacted or may impact the ability to serve students, staff and other stakeholders.\n Cultural Competence: Recognize the need to become knowledgeable about the ways to communicate and support those we serve from other backgrounds. \n Operational Planning: Have an understanding and knowledge of the college's strategic plan and how your work supports each of them. Understand the department's expectations to find proactive ways to support the goals of the department.\n Leading from the Middle: Lead from where you are by closely examining your responsibilities for the department and bringing new ideas to your supervisor.\n Team Building: Participate in team-building exercises and strive to build positive and collaborative relationships with colleagues cross-functionally.\n\nMinimum Qualifications:\n\n A Bachelor's degree in Information Technology, Cyber Security, or similar business-related area and two years of experience in cybersecurity securing enterprise class IT infrastructure (i.e., LAN, WAN, wireless systems, video conferencing, Secured FTP, DNS, DHCP, RADIUS, TCP/IP and other protocols).\n\nOR\n\n An associate’s degree in Information Technology, Cyber Security, or similar business-related area and four years of experience in cybersecurity securing enterprise class IT infrastructure (i.e., LAN, WAN, wireless systems, video conferencing, Secured FTP, DNS, DHCP, RADIUS, TCP/IP and other protocols).\n\nAND\n\n Able to perform technology risk analysis and clearly communicate impact and likelihood in easy-to-understand terms.\n Experience with the administration of enterprise firewalls, NAC (Network Access Control), EDR (End-point Detection and Response, also known as Anti-virus/Anti Malware), MFA (Multi-Factor Authentication), Vulnerability Scanners and Agents, and/or DNS security solutions.\n Experience working with a third-party Managed Security Service Provider (MSSP).\n Working knowledge with common cyber security frameworks and standards from NIST (National Institute of Standards and Technology) and Center for Internet Security (CIS) such the NIST Cyber Security Framework (CSF) and the CIS top 20 security controls.\n\nSelection Process:\nThe selection process for this position will be conducted through a competitive, merit-based evaluation of all qualified applicants. Preliminary screening will be based on the completed application package submitted by the candidate.\nPosition will remain open until filled with a priority deadline of July 22, 2026.\nThis posting may be used to fill multiple or similar positions.\nApplication Instructions:\nIn your application, please include a resume and cover letter that specifically address how your background and experience align with the requirements, qualifications, and responsibilities of the position.\nThe application will ask for you to provide three references. We ask that they are all professional references and at least one is a current/recent supervisor.\nAdditional Information/Benefits:\nSalary Information: The salary range reflects the minimum and maximum starting salary for the position. When determining the starting salary for a new employee, FRCC takes into consideration a combination of the selected candidate’s education, training and experience as it relates to the requirements of the position, as well as the position’s scope and complexity, internal pay equity and external market value.\nBenefits Information: For information about benefits for Administrative, Professional and Technical Employees and Faculty, please see the Front Range Community College Benefits page.\n \nWelcoming. Respectful. Inclusive. Together, we are FRCC.