Senior Cybersecurity Analyst

LSAC’s mission is to advance law and justice by promoting access, equity, and fairness in law school admission, to broaden the pathway into legal education, and to support law schools, law students, and the legal education community.

Pay Range for this role is 120,000 to 132,000.

The Senior Cybersecurity Analyst is integral to protecting, monitoring, and improving the security posture of LSAC's network, Microsoft cloud environment, and intellectual property such as test items, candidate data, and systems data. This role serves as LSAC's subject-matter expert for Microsoft Azure security, Microsoft Purview, and Data Loss Prevention (DLP), leading the design, implementation, and ongoing tuning of the controls that discover, classify, and protect sensitive information across Microsoft 365, Azure, and endpoints.

These duties include partnering with departments throughout LSAC to raise security awareness and educate all LSAC staff in security best practices; fully utilizing the tools required to monitor, analyze, and respond to security threats and related incidents; and maintaining compliance with outside requirements (such as SOC 2, PCI DSS, and financial and IT audits). Additional responsibilities include monitoring and reporting on intrusion prevention systems, cloud security alerts, DLP policy matches, and suspicious network traffic;

overseeing firewalls and website penetration testing; and ensuring project deliverables follow security guidelines. As a senior member of the Cybersecurity team, the analyst provides technical leadership, mentors other team members, and champions the best practices and procedures of LSAC's overall Security Systems Program.

Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this position. The individual employed in this position will be required to:

• Improve, manage, and provide direction re: LSAC Security Policies, Procedures, and Best Practices and maintain and enhance the formal Security Systems Program.
• Serve as LSAC's subject-matter expert for Microsoft Purview, owning the design, deployment, and ongoing tuning of Data Loss Prevention (DLP) policies across Exchange Online, SharePoint, One Drive, Teams, endpoints, and Azure data sources.
• Develop and maintain LSAC's data classification framework, including sensitive information types, trainable classifiers, and sensitivity labels, to protect test items, candidate personally identifiable information (PII), and other confidential data.
• Triage, investigate, and resolve DLP alerts and incidents; tune policies to reduce false positives; and report on data‑handling risk trends to IT leadership.
• Administer and enhance other Microsoft Purview solutions, such as Information Protection, Insider Risk Management, Data Lifecycle Management, Audit, eDiscovery, and Data Security Posture Management for AI, in support of data governance and compliance.
• Secure LSAC's Microsoft Azure environment, including identity and access (Microsoft Entra , Conditional Access, Privileged Identity Management), network security, Key Vault, and Microsoft Defender for Cloud recommendations and regulatory compliance reporting.
• Integrate Purview, Microsoft Defender, and Azure telemetry with Microsoft Sentinel or LSAC's SIEM to build detections, dashboards, and automated response playbooks.
• Lead the development of effective cybersecurity policies to address existing and emerging threats, including AI acceptable‑use and data protection policies, data governance, and compliance.
• Perform IT security inspections, tests, system‑level audits, and reviews of existing IT software, hardware, and cloud services to support the annual reviews that ensure compliance with SOC 2, IT and financial audits, PCI DSS, etc.
• Evaluate and recommend new Security products and services (hardware and software).
• Consult on, monitor, and report on security systems such as intrusion prevention and detection systems, VPNs, firewalls, and cloud security controls.
• Perform network and system vulnerability scans and penetration testing on workstations, servers, network devices, and other computer systems and work with appropriate groups to close Security gaps.
• Develop and support automated tools and queries (e.g., KQL, Power Shell) that analyze security events in access control, audit, and cloud logs to discover patterns and evidence of problems.
• Provide consultation and assistance to…