Senior Information Technology Security Analyst

Senior Information Technology Security Analyst

The University of Pennsylvania, the largest private employer in Philadelphia, is a world-renowned leader in education, research,and innovation. This historic, Ivy League school consistently ranks among the top 10 universities in the annual U.S. News & World Report survey. Penn has 12 highly-regarded schools that provide opportunities for undergraduate, graduate and continuing education,all influenced by Penn's distinctive interdisciplinary approach to scholarship and learning. As an employer Penn has been ranked nationally on many occasions with the most recent award from Forbeswho named Penn one of America's Best Large Employers in 2023.

Penn offers a unique working environment within the city of Philadelphia. The University is situated on a beautiful urban campus, with easy access to a range of educational, cultural, and recreational activities. With its historical significance and landmarks, lively cultural offerings, and wide variety of atmospheres, Philadelphia is the perfect place to call home forwork and play.

The University offers a competitive benefits package that includes excellent healthcare and tuition benefits for employees and their families, generous retirement benefits, a wide variety of professional development opportunities, supportive work and family benefits, a wealth of health and wellness programs and resources,and much more.

Senior Information Technology Security Analyst

Information Technology Security Analyst Senior

The Senior Information Technology Security Analyst plans, designs,implements, enforces, and audits information security controls,policies, and procedures that safeguard University systems,networks, applications, and data. The position serves as a senior member of the Security Operations team responsible for monitoring and responding to cybersecurity threats, investigating security incidents, coordinating remediation efforts, conducting risk assessments, and supporting enterprise security initiatives. Therole partners with technical and business stakeholders to identify and mitigate risks, provides guidance on security best practices and emerging threats, mentors junior analysts, and contributes to continuous improvement of security operations, incident response,and threat detection capabilities.

• Lead cybersecurity incident response activities, includinginvestigation, containment, eradication, recovery, documentation,and stakeholder coordination.
• Monitor, analyze, and investigate security alerts and eventsacross endpoint, network, cloud, and identity securityplatforms.
• Conduct threat hunting and advanced security investigations to identify malicious activity and emerging threats.
• Support and maintain enterprise security monitoringtechnologies, endpoint security controls, and security operationsinfrastructure.
• Perform risk assessments and vulnerability analysis and recommend remediation actions to reduce organizational risk.
• Deploy, maintain, and optimize security technologies and controls supporting security operations and monitoring.
• Develop and maintain incident response procedures, operational playbooks, standards, and technical documentation.
• Provide security consulting and guidance to IT staff, business units, and project teams.
• Mentor junior analysts and facilitate knowledge sharing acrossthe Security Operations team.
• Perform additional duties as assigned.

• Bachelor of Science and 3 to 5 years of experience or equivalent combination of education and experience is required.
• Experience investigating cybersecurity incidents and performingincident response activities.
• Experience with security monitoring, endpoint detection andresponse, or SIEM technologies.
• Knowledge of network security, operating system security,vulnerability management, and threat detection methodologies.
• Strong analytical, troubleshooting, organizational,documentation, and communication skills.

• Security Operations Center experience.
• Experience with Crowd Strike Falcon, Microsoft Defender,Log Scale, Splunk, or similar technologies.
• Experience with forensic analysis, threat hunting, cloud security, and security automation.
• Relevant security certifications.
• Bachelor of Science in Cybersecurity, Computer Science,Information Systems, Information Technology, or a related field
• Certifications:
  
  Security+, CySA+, GCIH, GCIA, CISSP, or equivalent.

Philadelphia, Pennsylvania

Information Systems & Computing (ISC) is the University of Pennsylvania's central IT organization, providing the core network,data, voice, video, and enterprise application infrastructure and services upon which Penn's numerous Schools and Centers build their unique tools and capabilities.

ISC's 300-plus employees work closely with the University's ITorganizations in order to create, deliver and support products and services that help Schools and Centers operate efficiently and effectively.…