Information Security Analyst

Job no: 504528
Department: Office of Information Technology
Work type: Staff Full-time Exempt
Location: Alabama
Categories: Information Technology

The Information Security Analyst will work closely with the Chief Information Security Officer in the management of the day-to-day operations of the sub-function departmental area in the Office of Information Technology. The incumbent will be responsible for performing comprehensive information security functions for the university. This position performs advanced specialized and complex tasks requiring expert knowledge and experience, as well as application of industry standards and university policy.

This position is 100% on-site at the UAH campus in Huntsville, AL.

Security Monitoring and Operations, including Policy, Compliance, Risk Management, Security Incident Response, and Audit:

• Work closely with the Chief Information Security Officer in the management of the day-to-day operations of the sub-function departmental area.
• Participate in a strong customer service philosophy for all of OIT as well as internally in the Information Security unit.
• Create a strong connection between OIT and all university organizations and units, build respect for the contributions of all, and bring groups together to share information, resources, and best practices.
• Serve as a subject management expert, manage, operate, and implement selected security measures for information systems to regulate access to university physical and digital assets and prevent unauthorized modification, destruction, or disclosure of information.
• Serve as a Cyber Security consultant and work closely with CISO and OIT staff in researching and evaluating security systems.
• Perform upgrades to evaluate feasibility, functionality, and compatibility. Perform system administration for existing, new, and upgraded security-related systems.
• Perform comprehensive system analysis on cyber data for existing and new security and OIT tools to identify security risks and areas of improvement, and related reporting.
• Perform vulnerability scanning, certificate maintenance, and analysis of university-owned equipment and work with the administrator to resolve security issues with equipment.
• Provide incident response and incident handling functions as needed.
• Review intrusion detection system (IDS) alerts to monitor for network-based attacks.
• Operate, configure, maintain, and monitor UAH’s centralized security management software solutions to provide endpoint protection and other security functions to university-owned systems.
• Provide security reviews of the university environment, including software, systems, and network devices as requested.
• Perform other duties as assigned by the UAH Chief Information Security Officer (CISO) or Chief Information Officer (CIO).

• Work with the UAH Security team to monitor compliance with university and governance policies that are consistent with FISMA, ITAR, HIPAA, FERPA, and PCI requirements, where applicable.
• Monitor system logs, alerts, and other data to ensure continuous systems operation. Respond to issues, problems, incidents, alerts, and other notifications effectively and promptly. Proactively alert management and peers regarding issues or concerns about any aspects of university security.
• Develop systems and general IT professional knowledge in self and others.
• Participate in knowledge transfer assignments, mentoring activities, work shadowing assignments, etc., as assigned, and generally be open to sharing knowledge with others and learning from others on a day-to-day basis.

• Provide scheduling input, technical expertise, and documentation to the Project Management workflow as needed. Perform system administration duties associated with project completion tasks.
• Research and plan new technology strategies that support requirements for performance, security, innovation, cost efficiencies, and strategic objectives of the department.

• Training or self-education to advance skills and learn new technologies as approved and assigned by management.

• 2 years of experience in the field of information security is preferred.
• Experience with Linux and Windows operating systems is desired.
• Experience with Crowdstrike or other EDR solutions is desired.
• Experience monitoring and issuing digital certificates is desired.
• Security+, CISA, CISM, or CISSP is preferred.