Information Security Analyst

The Information Security Analyst (ISA) is a member of the Information Security (IS) team and supports the operation of KUMC’s information security program. This includes a primary focus on detecting and preventing information security and cyber threats to the organization by correlating data to identify weaknesses within infrastructure, including software, hardware, and networks, and implementing measures to protect information assets.

Information Security Administration

Information Security Fusion Center

Information Security Analyst I

Professional Staff

The Information Security Analyst (ISA) is a member of the Information Security (IS) team and supports the operation of KUMC’s information security program. This includes a primary focus on detecting and preventing information security and cyber threats to the organization by correlating data to identify weaknesses within infrastructure, including software, hardware, and networks, and implementing measures to protect information assets.

The analyst is responsible for initial response to and troubleshooting cybersecurity, networking, and endpoint incidents; operational ticket-based work; front line monitoring of network devices, data center equipment, and other enterprise information security architecture items; as well as risk reviews for new technology and security exceptions.

The ISA is responsible for day-to-day operational security tasks. This individual helps guide our security operations program. The ISA participates in the identification, tracking, and monitoring of information security threats and service operations. The analyst utilizes established processes and tools for incident response, threat identification, analysis, and remediation. This position participates in the implementation and integration of risk management procedures.

• Perform real-time security log and event analysis and take action within defined parameters to contain and mitigate threats and elevate based upon severity.
• Review and analyze security events, determine severity, and author reports detailing the activity.
• Develop and maintain security operations documentation, including procedures, playbooks, escalation paths, and incident records.
• Develop strategies and plans with leadership to enforce security requirements and address identified risks.
• Detect and report residual risks, vulnerabilities, and other security exposures to IS management, including misuse of information assets and noncompliance.
• Review security authorization and exception requests, provide risk-based recommendations, and escalation requests that exceed established approval authority.
• Monitor reports and security logs for unusual events. Investigate events and data to determine appropriate resolution. Research and assess new threats and security alerts and recommend remedial actions.
• Monitor KUMC’s networks for security breaches and investigate violations.
• Monitor intrusion detection and prevention systems, network vulnerability systems, antivirus, and encryption systems.
• Respond to and escalation events and maintain documented monitoring and response processes.
• Analyze log files from a variety of source systems to construct the narrative of a security incident.
• Support information security incident management activities, including triage, investigation, containment, remediation, recovery, documentation, and post-incident review.
• Provide frontline support and guidance to IT support staff and users on security issues.
• Establish and maintain business and technical relationships with internal and external stakeholders.
• Provide implementation guidance and user support for security technologies, controls, and…