Information Security Analyst​/Engineer - Information Technology Services

About University at Albany:

The University at Albany is a Carnegie-classified Research 1 institution drivenby academic excellence, pioneering research and scientific discovery, and service to community. UAlbany's world-class faculty experts and approximately 17,500 students are creating new knowledge in fields such as artificial intelligence, semiconductor engineering, atmospheric and environmental sciences, cybersecurity, public health, public administration and social welfare while deepening our understanding of our world through scholarship and creative activity in the social sciences and humanities.

As one of the most diverse public research institutions in the nation, the University is a national leader in public engagement, educational equity and social mobility. For over 180years, UAlbany has molded bright, curious and engaged students and launched them toward success.

Located in Albany, New York, New York State's capital, the University is convenient to Boston, New York City, and the Adirondacks.

Join the University at Albany's Information Technology Services(ITS) as an Information Security Analyst/Engineer and help protectcritical infrastructure, institutional data, and research assets ina fast-moving, research-intensive environment at a Carnegie R1research institution.

We're looking for someone to join a small, senior team that operates with real ownership. You'll work directly with the Chief Information Security Officer (CISO) and partner with network,systems, and application teams. You'll handle modern incident response and network security on a stack that includes Microsoft Defender extended detection and response (XDR), Palo Alto and Cloudflare.

You'll investigate and respond to incidents end-to-end, build automation playbooks that make the next response faster, and managefirewall policy for an institution that takes security seriously.

You'll also handle day-to-day triage and ticket work - but the expectation is that you're building systems that reduce that burdenover time, not just clearing the queue.

This is an excellent opportunity if you want breadth - incident response (IR), network defense, automation, and engineering
-without being siloed into one function.

• Incident detection, response, and automation
  • Monitor and triage security alerts across endpoints, identity,and cloud workloads using tools such as Microsoft Defender and Sentinel.
  • Investigate and respond to incidents end-to-end (scope,contain, eradicate, recover); document actions and elevate asneeded.
  • Build and improve incident response workflows, including cloud automation playbooks (security orchestration, automation, and response (SOAR) and scripts that reduce time-to-detect andtime-to-respond.
  • Partner with network, systems, and application teams to containthreats, remediate root causes, and improve detections and preventive controls.
• Network security (firewalls, visibility, and threat-drivenmonitoring)
  • Design, review, and maintain next-generation firewall policies and exceptions (Palo Alto) and web application protections(Cloudflare), including change control and documentation.
  • Analyze network telemetry for anomalies; build detections and workflows that correlate network, endpoint, identity, and cloudsignals.
• Vulnerability management (secondary/backup)
  • Run regular vulnerability scans using Tenable (and similar tools).
  • Automate vulnerability tracking and reporting.
  • Coordinate remediation with system owners and technical teams.
• Risk and compliance (secondary/backup)
  • Support risk assessments, audits, and policy updates.
  • Promote security awareness and best practices across campus.
• Engineering and integration (supporting IR and network security)
  • Develop and maintain scripts and automation workflows supporting…