IT Security Analyst , Information Security Office

About Berkeley

At the University of California, Berkeley, we are dedicated to fostering a community where everyone feels welcome and can thrive. Our culture of openness, freedom, and belonging makes it a special place for students, faculty, and staff, who are among the most talented and accomplished anywhere, including Nobel laureates, Pulitzer Prize winners, and Mac Arthur Fellows. Since our founding in 1868, we have been an engine for innovation - driving intellectual, economic, and social progress that benefits California, the U.S., and beyond.

Together, we change the world.

At Berkeley, the best careers are built on a foundation of continuous learning and growth. We actively support professional development by providing all full-time staff employees with at least 80 hours of paid time per year and provide space for supportive colleague communities via numerous employee resource groups. We invite applicants who are inspired by our Principles of Community and who are eager to be part of our exciting Strategic Plan, which charts Berkeley's next era of excellence.

Learn more about some of our accomplishments at Points of Pride.

The Information Security Office (ISO) coordinates the risk management process for UC Berkeley's information systems and directs campus-wide efforts to adequately secure institutional data. ISO is led by the Chief Information Security Officer and consists of seven areas:
Information Security Policy, Information Security Operations, Information Security Administration and Engineering, Identity and Access Management, Information Security Assessments, Outreach and Engagement, and Service Management.

As a seasoned IT Security Analyst working collaboratively within the Security Engineering team at UC Berkeley, the candidate will focus on systems administration, managing Security Engineering systems, including installation, configuration, and patching of systems and software, while implementing security controls according to best practices to prevent malicious intrusion of systems. The candidate will research and implement systems, services, and technology solutions to support Information Security Office systems and services, writing and executing complex scripts in support of systems management, log analysis, and other system administration duties for multiple integrated systems.

Additionally, the candidate will assist in implementing and maintaining various Dev Ops processes to automate systems provisioning and management. The role involves implementing complex and broad-scale security controls to prevent unauthorized access or changes to campus hardware, software, and network infrastructure, including systems such as Firewalls, TAPs, intrusion detection/prevention systems (IDS/IPS), Endpoint Detection and Remediation (EDR agents), Vulnerability Scanners, and the Security Information and Event Management system (SIEM).

The candidate will provide research, analysis, and solutions to address attempted efforts to compromise security protocols, advise the campus community on security prevention, best practices, and secure software, and serve as a subject matter expert, providing analysis and context for security investigations and incidents.

30%

• Manages Information Security Office systems, including the installation, configuration, maintenance, and support of systems and software.
• Implements security controls according to best practices to prevent malicious intrusion of systems.

30%

• Researches, evaluates, and implements systems, services, and technology solutions that support Information Security Office systems and services.
• Performs system or device enhancements such as software, hardware, and network configuration, updates and installations for projects or services of moderately complex scope.

15%

• Writes and executes complex scripts in support of systems management, log analysis and other duties for multiple integrated systems.
• Assist in implementing and maintaining various Dev Ops processes to automate systems provisioning and management.

10%

• Implements complex and broad-scale security controls to prevent and detect unauthorized access or changes to campus hardware, software, and network infrastructure. Systems such as Fire Walls, Intrusion Detection/Prevention Systems(IDS/IPS), Endpoint Detection and Remediation (EDR agents), Vulnerability Scanners, and Security Information and Event Management systems (SIEM).
• Responsible for providing research, analysis and solutions to address attempted efforts to compromise security protocols.
• Advises the campus community on security prevention, best practices and secure software.

5%

• Serves as a subject matter expert, providing analysis and context for security investigations and incidents.

5%

• Triages security incidents and support tickets as part of a periodic analyst rotation; may participate in responding to security events and operational issues that may require immediate attention and arise during…