Information Security Analyst I

Southern New Hampshire University is a team of innovators. World changers. Individuals who believe in progress with purpose. Since 1932, our people-centered strategy has defined us — and helped us grow a team that now serves over 180,000 learners worldwide. Our mission to transform lives is made possible by talented people who bring diverse industry experience, backgrounds and skills to the university. And today, we're ready to expand our reach. All we need is you. Make an impact — from near or far At SNHU, you'll have the option to work remotely in the following states: Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, New Hampshire, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin and Wyoming. We ask that our remote employees have access to a reliable internet connection and a dedicated, properly equipped workspace that is free of distractions. Employees must reside in, and work from, one of the above approved states. The opportunity The Information Security Analyst I reports to the Director of Information Security Operations. You will be an important member of the Security Operations Center (SOC) team responsible for threat detection, monitoring, and incident response in a multifaceted enterprise technology ecosystem. You will be responsible for performing security investigations, performing analysis of information security events in a large-scale enterprise ecosystem, and assisting with information security incidents to ensure the protection of SNHU's mission-critical technology resources and institutional information. You will work 100% remotely from any of our approved states. #LI-Remote What You'll Do: Respond and perform analysis on security alerts and incidents. Support technical investigations of complex or high-severity security threats or incidents. Coordinate information security incident response with SNHU's Information Security Incident Response Plan. Support the incident response lifecycle and have the analytical mindset needed when it comes to escalated investigations and investigations into novel security incidents. Participate in incident containment and eradication activities like endpoint isolation, malware remediation, forensic analysis, malware analysis, community member interviews, and network traffic analysis. Work cross-functionally across ITS and all SNHU teams to provide support, guidance, and technical implementations where appropriate, to include triage, containment, and remediation when applicable. Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, incident timelines, and attack vector(s). Conduct real-time monitoring of security events from multiple sources and use analytical and critical thinking skills to identify, triage, analyze, investigate, and escalate information security events and alerts. Help perform investigations in complex or high-severity security threats or incidents. Communicate with partners, in a non-technical manner, at all organizational levels as part of incident response and remediation activities. Review and help implement standard operational processes for handling common incident types. Demonstrate a deep source of ethics, integrity, and confidentiality. Can remain calm and function at the highest level during a crisis. What We're Looking For: 2+ years working in a security operations center (SOC), a cybersecurity operations center or on a cybersecurity incident response team. Bachelor's degree Professional Certification(s): CySA+, Sec+, or relevant certification. Understanding of MITRE ATT&CK Framework, Cyber Kill Chain, and cloud security principles. Familiarity with basic SIEM technology or EDR tools. Experience with IT networking. Experience with cloud security. Experience with Search Processing Language (SPL) or Kusto Query Language (KQL) with an ability to create complex queries for log analysis and security monitoring. Experience with enterprise security tools like Splunk, Tenable, Proofpoint tools, Microsoft Defender components, Office 365 tools, PowerShell, and multiple network tools. Experience with Cloud Platforms (Azure), security controls, and assessment techniques. Work Environment and Physical Requirements: Office Hours: Monday through Friday 8:00am – 4:30pm Professional office environment. Sedentary work: Requires remaining in a stationary position, often standing or sitting for prolonged periods. We believe real innovation comes from inclusion - where different experiences, perspectives and talents are celebrated. So if you're wondering whether SNHU is right for you, take the leap and apply. You might be just the person we're looking for. Compensation The annual pay range for this position is $64,283.00 - $102,872.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $71,033.00 - $96,103.00. Exceptional benefits (because you’re exceptional) You’re the whole package. Your benefits should be, too. As a full-time employee at SNHU, you’ll get: High-quality, low-deductible medical insurance Low to no-cost dental and vision plans 5 weeks of paid time off (plus almost a dozen paid holidays) Employer-funded retirement Free tuition program Parental leave Mental health and wellbeing resources