IT Security Analyst

Works under the supervision and direction of the Director and/or Manager, Information Security Operations
Design and implement security solutions to protect the University's computer networks and systems from cyber attacks, and help set and maintain security standards
Responsible for ensuring that the University's digital assets are protected from unauthorized access
Securing both online and on-premise infrastructures, weeding through metrics and data to filter out suspicious activity, and finding and mitigating risks before breaches occur
Responding to security incidents, assessing the impact of an attack, taking action to mitigate, and directing remediation and recovery efforts

Minimum Qualifications
Bachelors degree in Computer Science, Information Security and/or equivalent experience. One year practical experience in an information security role or IT systems administration.

Preferred Qualifications

Experience and knowledge in the following technologies:
Security Information and Event Management system (SIEM)
Next-Gen Firewalls, IDS/IPS
Microsoft Office 365 security suite
Vulnerability management tools
Endpoint protection solutions

Must be self-directed on work assignments and complete projects on time, while keeping all parties notified of progress.
Excellent oral, written and interpersonal skills.
Must be able to take the initiative in solving a wide range of problems.
Must be able to handle necessary communication with third party software vendors and to keep up to date on vendor upgrades.
Ability to work in a team environment.
Must be able to provide necessary reports to keep Information Security director up to date on all active issues and projects.
Ability to keep confidential all sensitive data.
Ability to provide extensive documentation as needed.
Excellent organizational skills.
Advanced analytical and logical reasoning skills.
In-depth experience and knowledge of the methods, procedures, and tools associated with technical troubleshooting and repair.

Essential Duties
Manage and configure security tools, including but not limited to Security Information and Event Management system (SIEM), firewalls, intrusion detection and prevention systems (IDS/IPS), threat and vulnerability management tools, network traffic inspection tools, and endpoint protection solutions. Administer security tools within Microsoft Office 365 and Azure cloud environments, including ATP, CAS, Azure Identity Protection, and Sentinel. Responsibilities include implementing and managing protection policies, investigating and responding to threats, and creating reports to track metrics. Incident Response: Review and respond to investigations created by Tier 1 security analysts. Responsible for assessing the impact of a security incident and taking action to mitigate the attack to prevent further damage. Collect asset data (system logs, configs, running processes, etc.) on systems for further investigation. Determines and directs remediation and recovery efforts. Cyber intelligence: Keeping abreast of developing security news and threats and sharing that information with applicable system owners and business units which could potentially be impacted. Utilize emerging threat intelligence (indicators of compromise (IOCs), newly released vulnerabilities, etc.) to identify vulnerable systems. Coordinate with system and business owners to apply remediation efforts when vulnerabilities are detected. Organize and direct remediation efforts in response to penetration & vulnerability testing, as well as various third-party risk assessments (NIST, ISO 27001). Assist with compliancy requirements, create compliance reports, and support the audit process for campus PCI networks and other units subject to state, federal, or regulatory IT security compliancy cases (such as HIPAA, FERPA, PHI, etc.). Planning, buying, and implementing security hardware and software, while ensuring IT and network infrastructure is designed with best security practices in mind. Coordinate the efforts of consultants, maintenance contractors and vendors; manage their involvement on projects and directs their efforts. Responsible for following all established Information Technology policies and procedures in relation to change control, work orders, inventory management, and documentation control for implementation, coordination, and maintenance of all levels of network hardware, software and other related architectures Performs other duties as assigned by Director and/or Manager, Information Security Operations

Closing Date:
Open Until Filled: Yes

For full application instructions and position description, visit: https://webster.peopleadmin.com

Webster University is committed to creating a diverse environment and is proud to be an equal opportunity employer. We are committed to maintaining a culturally and academically diverse faculty and staff of the highest caliber. Accordingly, Webster University provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender, gender identity, national origin, ethnicity, age, protected veteran or disabled status, genetic information, or any other characteristic protected by applicable law. jeid-39c752a55cd3064ebfc22b39335f916f