Cybersecurity Analyst

Universities of Wisconsin; Madison (WI); Hybrid; USD 50,000 - 61,000; Full time

Job summary

The University of Wisconsin–Madison is seeking a Cyberdefense Analyst I to bridge risk management and incident response, protecting HIPAA-regulated data and a $1B+ research enterprise.

You will lead risk assessments, harden infrastructure, and serve as the primary incident response lead, collaborating with SMPH, campus, and vendors. Some onsite work with potential remote options.

Qualifications

• Experience conducting cybersecurity risk assessments across processes, cloud/IT, and research workflows.
• Hands-on use of security operations tools to monitor, triage, and remediate.
• Knowledge of HIPAA/HITECH, NIST SP 800-53/800-171, ISO 27001, CIS Controls.
• Ability to document security processes and remediation validation.
• Strong written and verbal communication with non-technical partners.

Responsibilities

• Assist in staff training opportunities.
• Conduct cybersecurity risk assessments and lead incident response across stakeholders.
• Perform basic data analyses and reporting.
• Map business processes using basic methods.
• Recommend technology solutions aligned with business strategy.
• Design and implement data reporting and BI systems.
• Provide guidance on technology usage and management.

Skills

Cyber risk assessments

Security tools usage

Compliance knowledge

Documentation skills

Communication skills

Education

Bachelor’s degree preferred

Tools

SIEM

EDR/XDR

Vulnerability scanners

Job description

Current Employees: If you are currently employed at any of the Universities of Wisconsin, log in to Workday to apply through the internal application process.

Job Category:

Academic Staff

Employment Type:

Regular

Job Profile:

Cyberdefense Analyst I

Job Summary:

The Cybersecurity Analyst serves as a strategic collaborator, uniquely bridging the gap between proactive risk management and real-time emergency response. Unlike traditional siloed roles, this position is responsible for the integrated threat lifecycle: you will lead cybersecurity risk assessments to enforce secure environments, while simultaneously serving as the primary lead for incident response when threats emerge. This role is fundamental to protecting the integrity of our HIPAA-regulated patient data and ensuring that the School’s $1B+ research enterprise remains resilient against an increasingly sophisticated global threat landscape.

• This position may require some work to be performed in-person, onsite, at a designated campus work location. Some work may be performed remotely, at an offsite, non-campus work location.

Key Job Responsibilities:

• Assists in the identification, development, and facilitation of unit staff training opportunities

• Performs cybersecurity risk assessments to pre-emptively harden research and clinical infrastructure, while simultaneously spearheading incident response to ensure collaboration across SMPH, campus, and third-party vendors

• Performs basic data analyses and reporting

• Assists in mapping business processes using basic mapping methodologies

• Assists in making recommendations for the selection of technology solutions to align with business strategies

• Assists in the design, development, and implementation of data reporting and business intelligence systems

• Provides basic procedural and technical guidance to unit staff regarding technology usage and management

Department:

School of Medicine and Public Health, Office of Information Technology, Cybersecurity.

Compensation:

The starting salary for the position is $55,000 annually, but is negotiable based on experience and qualifications.

Employees in this position can expect to receive benefits such as generous vacation, holidays, and sick leave; competitive insurances and savings accounts; retirement benefits. For more information, refer to the campus benefits webpage.

SMPH Faculty /Academic Staff Benefits Flyer 2026

Required Qualifications:

• Demonstrated experience conducting cybersecurity risk assessments to identify and document risks across business processes, cloud/IT systems, and research workflows.

• Hands-on experience using security operations tools (e.g., SIEM, EDR/XDR, vulnerability scanners) to monitor enterprise environments, triage alerts, and track remediation.

• Working knowledge of cybersecurity frameworks and regulations, including HIPAA/HITECH, NIST SP 800-53 / 800-171, ISO 27001, or CIS Controls.

• Proven ability to document information security processes, procedures, and validation of remediation

• Strong written and verbal communication skills, with the ability to translate complex security risks to non-technical business partners, clinical leads, and researchers.

Preferred Qualifications:

• 2 or more years of experience with cybersecurity

• Detailed understanding of network design, security controls, and system administration with excellent analytical and problem-solving skills

• Proven experience in cybersecurity governance, risk management, and compliance

• Experience executing project management skills including design review, threat modeling, and risk profiling while working across a large, complex, distributed, organization

• Experience writing or updating technical documentation, security procedures, and compliance reporting artifacts.

• Active industry certification: CompTIA CySA+, Security+, GIAC (GSEC/GCIH), CISA, or equivalent certification.

Education:

Bachelor’s degree preferred

University sponsorship is not available for this position, including transfers of sponsorship and TN visas.The selected applicant will be responsible for ensuring their continuous eligibility to work in the United States (i.e. a citizen or national of the United States, a lawful permanent resident, a foreign national authorized to work in the United States without the need of an employer sponsorship) on or before the effective date of appointment.This position is an ongoing position that will require continuous work eligibility. If you are selected for this position you must provide proof of work authorization and eligibility to work.

The department will not be able to support a request for a J-1 waiver. If you choose to pursue a waiver and apply for our position, neither the UW nor UWMF will reimburse you for your legal or waiver fees.

Contact Information:

Cody Roekle, [e-mail], 60/-263-7676

Relay Access (WTRS): 7-1-1. See RELAY_SERVICE for further information.

Institutional Statement on Diversity:

Diversity is a source of strength, creativity, and innovation for UW-Madison. We value the contributions of each person and respect the profound ways their identity, culture, background, experience, status, abilities, and opinion enrich the university community. We commit ourselves to the pursuit of excellence in teaching, research, outreach, and diversity as inextricably linked goals.

The University of Wisconsin-Madison fulfills its public mission by creating a welcoming and inclusive community for people from every background - people who as students, faculty, and staff serve Wisconsin and the world.

The University of Wisconsin-Madison is an Equal OpportunityEmployer.

Qualified applicants will receive consideration for employment without regard to, including but not limited to, race, color, religion, sex, sexual orientation, national origin, age, pregnancy, disability, or status as a protected veteran and other bases as defined by federal regulations and UW System policies. We promote excellence by acknowledging skills and expertise from all backgroundsand encourage all qualified individuals to apply. For more information regarding applicant and employee rights and to view federal and state required postings, visit the Human Resources Workplace Poster website.

To request a disability or pregnancy-related accommodation for any step in the hiring process (e.g., application, interview, pre-employment testing, etc.), please contact the Divisional Disability Representative (DDR)in the division you are applying to.Please make your request as soon as possible to help the university respond most effectively to you.

Employment may require a criminal background check. It may also require your references to answer questions regarding misconduct, including sexual violence and sexual harassment.

The University of Wisconsin System will not reveal the identities of applicants who request confidentiality in writing, except that the identity of the successful candidate will be released. See Wis. Stat. sec. 19.36(7).

The Annual Security and Fire Safety Report contains current campus safety and disciplinary policies, crime statistics for the previous 3 calendar years, and on-campus student housing fire safety policies and fire statistics for the previous 3 calendar years. UW-Madison will provide a paper copy upon request; please contact the University of Wisconsin Police Department.