IT Statewide Infosec Analyst

The IT Statewide Infosec Analyst 1/2 will support Grambling State University’s Office of Technology Services by monitoring and responding to cyber threats across the enterprise. The role centers on centralized security event triage, incident response coordination, and hands-on technical support for systems, applications, and networks.

• Monitor, triage, and investigate real-time security alerts generated through Palo Alto Networks Cortex XSIAM and Crowd Strike Falcon Complete platforms.
• Validate high-priority threat notifications, evaluate relevant context, and perform initial containment actions in alignment with enterprise incident response playbooks.
• Coordinate remediation workflows with the Crowd Strike Falcon Complete managed service team and applicable OTS technical verticals.
• Record investigation findings, root cause analyses, and response actions in the centralized security incident log.
• Assist with tuning detection logic, correlation rules, and automated response playbooks within Cortex XSIAM to reduce false positives.
• Monitor and manage the Service Now ticketing queue for proxy-related issues, access requests, and categorized URL reclassification tickets.
• Troubleshoot and resolve web filtering issues,
  SSL/TLS decryption exceptions, and secure web gateway (SWG) connection anomalies for enterprise users.
• Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or potential evasion attempts.
• Maintain operational documentation and standard operating procedures (SOPs) for enterprise proxy management and ticket workflows.
• Investigate suspicious internal and perimeter network traffic, protocol anomalies, and anomalous host behavior using network telemetry and logs.
• Conduct proactive threat hunting using threat intelligence indicators (IoCs) and behavioral analytics to identify potential adversary activity (TTPs).
• Correlate disparate log sources including firewall, DNS, VPN, authentication, and endpoint logs to reconstruct attack timelines and assess scope of impact.
• Escalate confirmed intrusions or advanced persistent threats (APTs) to senior incident response personnel and OTS leadership.
• Monitor identity provider signals and behavioral analytics for indications of compromised credentials, impossible travel, and unauthorized account modifications.
• Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
• Verify post-compromise cleanup to ensure persistent access mechanisms (for example, malicious inbox forwarding rules and unauthorized OAuth applications) are identified and removed.
• Advise agency points of contact and help desk personnel on remediation best practices and credential hygiene.
• Perform other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.

• Four years of experience in information technology; or
• Six years of full-time work experience in any field plus two years of experience in information technology; or
• An associate’s degree in information technology plus two years of experience in information technology; or
• A bachelor’s degree plus two years of experience in information technology; or
• A bachelor’s degree with twenty-four semester hours in an information technology, computer science, engineering, mathematics, or business analytics field plus one year of experience in information technology; or
• A master’s degree plus one year of experience in information technology.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is…