Job Overview

Assist in performing procedures and provides technical solutions that serve to provide appropriate access to and protect systems from unauthorized users. 

Essential Functions

• Assist with developing strategies to achieve organizational goals; understand organization's strengths and weaknesses; analyze potential risks and opportunities; adapt recommendations to changing conditions and aligns with best practices.  
• Help facilitate large collaborative teams to achieve organizational goals.  
• Support community communication efforts, presenting security insights to leadership.
• Develop technical documentation (designs, specifications, processes, workflows) and communications.
• Develop and validate baseline security configurations for operating systems, applications, networking, and telecommunications equipment.
• Participate in multiple, moderate- to high-risk projects.
• Work with a team to advance project goals and provide technical help and subject matter expertise. Actively engage in project support and solutioning.
• Share technical knowledge with teammates and help solve more complex problems.
• Document individual progress on assigned deliverables.
• Gather, maintain, and validate metrics for area of responsibility.
• Mentor student workers and junior employees.
• Carry out procedures to ensure that all systems, products, and services meet organization security standards. Recommend procedural improvements.
• Research information security trends to maintain technical understanding of the latest vulnerabilities and threats.
• Assist with providing artifacts to Governance, Risk & Compliance in relation to internal & external audits.
• Independently work with business units to achieve security objectives and identifies, reports, and resolves security risks and violations.
• Perform cyber investigations through forensic fact gathering with a focus on e-discovery.
• Analyze high volumes of logs, network data, and other attack artifacts in support of incident investigations.
• Provide guidance and technical expertise as needed for information security training and awareness programs.
• Participate in troubleshooting processes during and outside of normal business hours and participate in change management and root cause analysis.
• Mentor others regarding risk management, information security controls, incident analysis, incident response, monitoring, and other operational tasks (tools, techniques, procedures) in support of technologies managed by the Office of Information Security (OIS).
• Serve as an expert resource to others.
• Perform related duties based on departmental need. This job description can be changed at any time.

Required Education

Bachelor's Degree in Computer Science, Information Technology, Computer Engineering, or related field.

Eight (8) years of relevant work experience and/or other specialized training can be used in lieu of education requirement.

Required Experience

• Two (2) years of related experience
• Advanced knowledge of security tool administration.
• Moderate project management skills.
• Experience with system administration.
• Experience with network architecture or some level of related technical training.
• Advanced understanding of risk and vulnerability management.
• Experience with incident response.
• Advanced knowledge of industry standard security and compliance frameworks.

Additional Qualifications Considered

This position will primarily work in the area of information security risk management. The ideal candidate will have experience in the field of information security risk. Responsibilities may include, but are not limited to: assessing information security reviews to identify business risk, make recommendations for implementation of security controls, performing gap analysis of contracts and ensuring appropriate data security verbiage is included in contracts, documenting excessive risk via institutional risk acceptance processes, participating on projects with data security concerns to represent the office of information security and ensure appropriate documentation is in place, as well as departmental customer service via enterprise incident ticketing system and departmental mailboxes, and supervision/mentorship of co-op and student workers.2. CISSP, CISM, GISP or similar information security certification(s) are preferred.

Physical Requirements/Work Environment