Information Security Analyst I

Department:

Information Security Administration

-----

Information Security Fusion Center

Position Title:

Information Security Analyst I

Job Family Group:

Professional Staff

Job Description Summary:

The Information Security Analyst (ISA) is a member of the Information Security (IS) team and works closely with the other members of IS to develop and implement a comprehensive information security program. This includes a primary focus on detecting and preventing information security and cyber threats to our organization. The incumbent will be required to connect dots where they may not have existed before and correlate data in novel and interesting ways to determine weaknesses within our infrastructure (software, hardware, networks, etc.) to find creative ways to protect it. This position will be responsible for initial response to and troubleshooting cybersecurity, networking, and endpoint incidents; operational ticket-based work; as well as front line monitoring of network devices, data center equipment, and other enterprise information security architecture items.

The ISA is responsible for day-to-day operational security tasks. An ideal candidate has a passion for information security, problem solving, documentation, communication, organization, collaboration, and attention to detail. This individual will be empowered to help guide our security operations program. The ISA participates in the identification, tracking, and monitoring of information security threats and service operations. The analyst utilizes established processes and tools to focus on incident response, threat identification, analysis, and remediation. This position participates in the implementation and integration of risk management procedures.

Job Description:

Job Responsibilities

• Perform real-time security log and event analysis and take action within defined parameters to contain and mitigate IS threats and escalate as needed.

• Review and analyze security events and author reports detailing the activity.

• Complete IS operations and process documentation.

• Report detected elements concerning identified risks, vulnerabilities, and other security exposures to IS leadership.

• Inform, assist, and train OIS team members and customers with security requests, exceptions, products, and procedures.

• Monitor reports and security logs for unusual events and investigate as needed to achieve a compliant resolution.

• Identify new or emerging IS threats and recommend actions to mitigate them.

• Practice critical thinking and other forecasting methods to identify potential security incidents or disasters and work with the OIS team to reduce their likelihood.

• Monitor antivirus and encryption systems.

• Develop and improve relationships and communications with OIS customers and partners.

• Adapt, improvise, and remain flexible to changing or competing requirements, schedules, priorities, and efforts.

• Communicate and act in a professional, clear, and understandable manner.

• Participate in after-hours upgrades, troubleshooting, and the OIS on-call schedule.

• This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. It is only a summary of the typical functions of the job, not an exhaustive list of all possible job responsibilities, tasks, duties, and assignments. Furthermore, job duties, responsibilities and activities may change at any time with or without notice.

Work Environment

• Projects include after-hours coordination.

• Available 24/7 to respond to critical outages or incidents as needed.

• Rotate in an on-call schedule.

Required Qualifications

Education: Associate degree in information security, computer science, engineering, telecommunications, systems administration, or another related technical degree area. A combination of education and relevant work experience may be substituted for degree on a year for year basis.

Work Experience:

• One (1) or more years of progressive work experience in information technology or information security.

• Knowledge of compliance standards and regulations such as HIPAA, FERPA, GLBA, PCI DSS, NIST, and other

Preferred Qualifications

Education: Bachelor’s degree in information security, computer science, engineering, telecommunications, systems administration, or another related technical degree area.

Work Experience:

• CompTIA Network+, CompTIA Security+, (ISC)2 SSCP, or EC-Council ECSA certification, or an equivalent certification.

• Experience with McAfee security tools.

• Related work experience in a higher education or academic health care organization.

• Prior experience with SIEM technologies.

• Demonstrated experience implementing technical aspects of compliance standards and regulations such as HIPAA, FERPA, GLBA, PCI DSS, NIST, and others.

• Understanding of networking architectures, topologies, practices, and technologies.

• Experience with the Malcolm Baldrige Quality Excellence process and the Cybersecurity Excellence Builder.

Skills

• Customer service skills.

• Detailed oriented.

• Excellent communication, interpersonal, and organizational skills.

• Ability to work well under stress, within defined time lines.

Required Documents

• Resume/CV

• Cover letter

Comprehensive Benefits Package:

Coverage begins on day one for health, dental, and vision insurance and includes health expense accounts with generous employer contributions if the employee participates in a qualifying health plan. Employer-paid life insurance, long-term disability insurance, and various additional voluntary insurance plans are available. Paid time off, including vacation and sick, begins accruing upon hire, plus ten paid holidays. One paid discretionary day is available after six months of employment, and paid time off for bereavement, jury duty, military service, and parental leave is available after 12 months of employment. A retirement program with a generous employer contribution and additional voluntary retirement programs (457 or 403b) are available. https://www.kumc.edu/human-resources/benefits.html

Employee Type:

Regular

Time Type:

Full time

Rate Type:

Salary

Compensation Statement:

The pay range listed for this position is determined by our compensation program using market data and salary benchmarking. A combination of factors is considered in making compensation decisions including, but not limited to, education, experience and training, qualifications relative to the requirements of the position, and funding. At the University of Kansas Medical Center, a reasonable estimate for the starting pay range will be the minimum to midpoint of the posted range, taking into account the combination of factors listed above. 

Pay Range:

$58,656.00 - $86,000.00

Minimum

$58,656.00

Midpoint

$72,328.00

Maximum

$86,000.00