Cyber Defense Analyst I: Risk & Incident Response

UW School of Medicine and Public Health; Madison (WI); Hybrid; USD 55,000 - 75,000; Full time

Job summary

University of Wisconsin–Madison is seeking a Cyberdefense Analyst I to bridge proactive risk management and real-time incident response. You will lead cybersecurity risk assessments to harden research and clinical infrastructure while acting as the primary incident response lead, protecting HIPAA-regulated data and the university’s $1B+ research portfolio.

The role may require some on-site work, with some remote capability, and you will collaborate across SMPH, campus, and external partners to

Qualifications

• Demonstrated experience conducting cybersecurity risk assessments across business processes, systems and research workflows.
• Hands-on experience with security operations tools (SIEM, EDR/XDR, vulnerability scanners) for monitoring and remediation.
• Knowledge of HIPAA/HITECH, NIST 800-53/800-171, ISO 27001, CIS Controls.
• Ability to document information security processes, procedures, and remediation validation.
• Strong written and verbal communication to translate risks to non-technical partners.

Responsibilities

• Identify, develop, and facilitate staff training opportunities.
• Conduct risk assessments and lead incident response in collaboration with SMPH, campus, and vendors.
• Perform basic data analyses and reporting.
• Map business processes using basic methodologies.
• Recommend technology solutions aligned with strategy.
• Design and implement data reporting and BI systems.
• Provide guidance on technology use and management.

Skills

Cyber risk assessments

Security tools usage

HIPAA/NIST knowledge

Security process documentation

Communication skills

Education

Bachelor's degree

Tools

SIEM

EDR/XDR

Vulnerability scanners

Job description

University of Wisconsin–Madison is seeking a Cyberdefense Analyst I to bridge proactive risk management and real-time incident response. You will lead cybersecurity risk assessments to harden research and clinical infrastructure while acting as the primary incident response lead, protecting HIPAA-regulated data and the university’s $1B+ research portfolio.

The role may require some on-site work, with some remote capability, and you will collaborate across SMPH, campus, and external partners to