Cybersecurity Analyst

Salary/Position Classification

• $63,000 annual, Exempt
• 40 hours per week

Purpose of Position

The role of the Cybersecurity Analyst is to analyze and respond to cybersecurity threats, ensuring confidentiality, integrity, and availability of electronic information within the University. This involves actively addressing current and anticipated threats, vulnerabilities, and incidents. The analyst will collaborate with other departments and the North Dakota University System to coordinate incident response efforts, evaluate risks, and implement measures to mitigate and remediate cybersecurity threats and vulnerabilities. Furthermore, the Cybersecurity Analyst will contribute to UND's information security awareness and education programs.

Duties & Responsibilities

• Provide direct support in the resolution of IT security incidents, complaints, and queries
  
  • Maintain confidentiality regarding sensitive situations and information.
  • Review end-point security and intrusion detection systems to identify threats and take necessary actions to remediate them.
  • Provide technical support for IT security incident response execution.
  • Develop working relationships with investigating authorities.
  • Develop a working knowledge of evidence retrieval, documentation, and evidence control, and assist in compliance and enforcement.
  • Review logging to identify and respond to security incidents and maintain a Security Information and Event Management (SIEM) system. 
• Assist in implementing IT security technologies, assessments, monitoring, and improvement activities.
  • Review sensitive data management logs and assist customers with the disposition of sensitive university data.
  • Assist in IT security risk assessments and vulnerability management implementation, including conducting vulnerability assessments and penetration testing activities.
  • Participate in implementing new technologies and techniques with respect to security.
  • Configure, operate, and update security systems and technologies.
  • Generate reports to the IT Security Officer and CIO used to present findings, results, and recommendations from threat, vulnerability, penetration testing, and risk assessments of IT systems.
  • Research, test, and provide suggestions on potential systems that would benefit UND, e.g., Microsoft Sentinel, file encryption software, Splunk, pen testing options, etc. 
• Collaborate with various UND departments to understand their needs, challenges, and goals, and provide them with effective and efficient cybersecurity solutions. 
  • Recommend and implement cybersecurity solutions that align with the UND’s objectives, budget, and policies.
  • Monitor and evaluate the effectiveness and performance of cybersecurity solutions and provide regular feedback and reports to the VPRED department.
  • Stay updated with the latest cybersecurity threats and vulnerabilities relevant to M365 GCC High. Monitor threat intelligence feeds, analyze threat reports, and proactively implement security measures to mitigate emerging risks.
  • Collaborate with system architects and administrators to review the security architecture of the M365 GCC High Tenant. 
• Assist with providing campus education and awareness programs and initiatives related to IT security. 
  • Assist in creating and deploying IT security publications, awareness, and education activities. 
  • Provide guidance to schools, departments, and administrative offices in securing their data and information systems. 
  • Assist in maintaining UND’s Information Security website.
  • Assist with conducting phishing assessments.
  • Collaborate with the NDUS/CTS Information Security Office on security activities.
  • Implement Safeguarding UND Initiatives. 
• Develop and enforce IT security policies, standards, procedures, and guidelines, while staying updated on the latest trends and issues in IT security.
  • Implement UND IT security policies, standards, and guidelines in consultation with the CIO, IT Security Officer, UND legal counsel, UND records retention officer, NDUS/CTS information Security Office, and state professional colleagues and constituents.
• Provide mentoring and oversight to student employees 

Required Competencies

• Strong communication skills.
• Professionalism.
• Customer service oriented.
• Ability to work under pressure by maintaining efficiency, confidentiality, and composure.
• Strong attention to detail.
• Strong interpersonal skills and demonstrated excellence in customer service.
• Ability to communicate with non-technical and technical users.

Minimum Requirements

• Bachelor's Degree in Cybersecurity or other technology-related field.
• 1 year of varied information technology experience in computer and network infrastructure, operating systems, application software development, risk management, project management, and providing training.
• 1 year of direct experience in information security-related duties, including incident response, SIEM, IDS, and penetration testing.
• Proficiency in analytical reasoning and incident response.
• Successful completion of a Criminal History Background Check

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the US and to complete the required employment eligibility verification form upon hire. This position does not support visa sponsorship for continued employment.

Preferred Qualifications

• Experience in a university setting.
• Security or technology industry certifications (e.g., CISSP, SANS GIAC, CompTIA, Certified Ethical Hacker).