Senior IT Security Analyst – California Academy of Sciences

California Academy of Sciences

A globally renowned scientific and cultural institution located in San Francisco’s Golden Gate Park. Our mission is to regenerate the natural world through science, learning, and collaboration.

• Full Time
• San Francisco, CA
• Posted 5 months ago

Reporting to the Director of Information Technology, the Senior Security Analyst is responsible for configuring, maintaining, and monitoring internal security controls to prevent, detect, and respond to cyber threats. The Analyst will bring information security expertise to integrate security tools into daily operations, contribute to the improvement of security architecture, and assess/improve security in departments across the Academy. This position plays a critical role in maturing our IT and security programs at the Academy.

• Manage, coordinate, and implement the latest security best practices on network devices, firewalls, servers, and workstations.
• Partner with the IT Infrastructure Manager to establish and maintain a system for ensuring security policies are met.
• Evaluate the effectiveness of awareness and security training programs and recommend improvements.
• Analyze, research, and resolve security breaches and vulnerability issues.
• Evaluate, prioritize, and coordinate patching.
• Provide security expertise and consulting to the IT Team and CAS internal technology partners.
• Partner with external security advisors to evaluate security posture and review/remediate issues.
• Participate in team exercises to identify potential security risks and tabletop scenarios.
• Maintain awareness of industry-standard security trends, benchmarks, and frameworks (e.g., NIST, CISA, ISO 27001).
• Perform off‑hour/weekend work as required.

• 5+ years of experience in Information Technology.
• 3+ years of enterprise IT security experience.
• Experience with administration/use of security software such as Trellix, Fire Eye, Tenable, Nessus, Sophos, Splunk.
• BS/BA or equivalent training and experience.
• Information Security Certifications (CISSP, CISM, GIAC) strongly preferred.
• Hands‑on experience with firewalls, network security, and VPNs preferred.
• Hands‑on experience with SIEM preferred.
• Automation experience preferred.
• Strong problem‑solving and troubleshooting skills.
• Ability to interact with users of varying technical knowledge.
• Team collaboration skills.
• Advanced knowledge of information security management processes, tools, and techniques.

Must be able to carry 50 lbs. and perform repetitive motions 75% of time. Reasonable accommodations may be made.

Salary: $. Compensation commensurate with qualifications, with a total package emphasizing base salary and comprehensive benefits.

Full-time, 40 hours per week, Hybrid (3 days onsite).

The California Academy of Sciences will give full consideration for employment to all qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance (SF Police Code, Article 49).