IT Security Analyst (5353C), Information Security Office #87490

IT Security Analyst (5353C), Information Security Office #87490

At the University of California, Berkeley , we are dedicated to fostering a community where everyone feels welcome and can thrive. Our culture of openness, freedom, and belonging makes it a special place for students, faculty, and staff, who are among the most talented and accomplished anywhere, including Nobel laureates, Pulitzer Prize winners, and Mac Arthur Fellows. Since our founding in 1868, we have been an engine for innovation - driving intellectual, economic, and social progress that benefits California, the U.S., and beyond.

Together, we change the world.

At Berkeley, the best careers are built on a foundation of continuous learning and growth . We actively support professional development by providing all full-time staff employees with at least 80 hours of paid time per year and provide space for supportive colleague communities via numerous employee resource groups.

The Information Security Office (ISO) coordinates the risk management process for UC Berkeley's information systems and directs campus-wide efforts to adequately secure institutional data. ISO is led by the Chief Information Security Officer and consists of seven areas:
Information Security Policy, Information Security Operations, Information Security Administration and Engineering, Identity and Access Management, Information Security Assessments, Outreach and Engagement, and Service Management.

As a seasoned IT Security Analyst working collaboratively within the Security Engineering team at UC Berkeley, the candidate will focus on systems administration, managing Security Engineering systems, including installation, configuration, and patching of systems and software, while implementing security controls according to best practices to prevent malicious intrusion of systems.

The candidate will research and implement systems, services, and technology solutions to support Information Security Office systems and services, writing and executing complex scripts in support of systems management, log analysis, and other system administration duties for multiple integrated systems. Additionally, the candidate will assist in implementing and maintaining various Dev Ops processes to automate systems provisioning and management.

The role involves implementing complex and broad-scale security controls to prevent unauthorized access or changes to campus hardware, software, and network infrastructure, including systems such as Firewalls, TAPs, intrusion detection/prevention systems (IDS/IPS), Endpoint Detection and Remediation (EDR agents), Vulnerability Scanners, and the Security Information and Event Management system (SIEM). The candidate will provide research, analysis, and solutions to address attempted efforts to compromise security protocols, advise the campus community on security prevention, best practices, and secure software, and serve as a subject matter expert, providing analysis and context for security investigations and incidents.

The First Review Date for this job is August 7, 2026. For full consideration, please apply on or before the first review date.

• Manages Information Security Office systems, including the installation, configuration, maintenance, and support of systems and software.
• Implements security controls according to best practices to prevent malicious intrusion of systems.

• Researches, evaluates, and implements systems, services, and technology solutions that support Information Security Office systems and services.
• Performs system or device enhancements such as software, hardware, and network configuration, updates and installations for projects or services of moderately complex scope.

• Writes and executes complex scripts in support of systems management, log analysis and other duties for multiple integrated systems.
• Assist in implementing and maintaining various Dev Ops processes to automate systems provisioning and management.

• Implements complex and broad-scale security controls to prevent and detect unauthorized access or changes to campus hardware, software, and network infrastructure.…