Cybersecurity Analyst II AS6346

Oklahoma State University; Stillwater (OK); On-site; USD 55,000 - 70,000; Full time

Job summary

Oklahoma State University is seeking a Cybersecurity Analyst II to provide professional and technical expertise supporting enterprise technology services. The role contributes to the Security Operations Center (SOC) and Governance, Risk, and Compliance (GRC) functions across the OSU A&M System.

Responsibilities include coordinating with ISS, central IT, and campus stakeholders to protect information assets, perform moderately complex operational tasks, and escalate enterprise-wide issues through

Qualifications

• Bachelor's degree conferred on/before start date.
• Two years in an IT-related field (customer support, technical support, systems administration, networking, or similar).
• Ability to work independently within established processes.
• Education substitutions allowed: 1 year experience may substitute for 1 year of post-secondary education; master's may substitute for up to 2 years.

Responsibilities

• Provide professional and technical expertise to support enterprise technology services and align with system goals.
• Contribute to SOC and/or GRC functions across OSU A&M System.
• Collaborate with ISS staff, central IT, campus stakeholders, and business units to protect information assets.

Skills

Cybersecurity analysis

Communication skills

Analytical reasoning

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity/Information Systems

Job description

Campus

OSU-Stillwater

Contact Name & Email

Marjorie McLagan, [e-mail]

Work Schedule

Monday through Friday, 8:00am-5:00pm with occasional evenings and weekends.

Appointment Length

Regular Continuous/Until Further Notice

Hiring Range

$55,000 - $70,000

About This Position

The Cybersecurity Analyst II provides professional and technical expertise to support enterprise technology services, ensuring alignment with OSU/A&M System goals, compliance requirements, and departmental priorities. This position is responsible for performing specialized operational, technical, or analytical tasks within the assigned domain.

This position operates within OSU Information Technology and Information Security Services (ISS) and contributes to the Security Operations Center (SOC) and/or Governance, Risk, and Compliance (GRC) functions across the OSU A&M System. Responsibilities span academic, research, healthcare, and administrative environments and require coordination across multiple campuses, business units, and stakeholders. The role contributes to the protection of institutional information assets, performs moderately complex operational and analytical work, may lead defined projects or workstreams, and collaborates with stakeholders to support the confidentiality, integrity, and availability of institutional systems and data while escalating complex or enterprise-wide issues through appropriate channels.

Institutional Scope

• Provides enterprise cybersecurity support for the OSU A&M System.
• Operates with a system-wide perspective rather than a single-campus focus.
• Supports enterprise incident response, risk mitigation, regulatory compliance, and cybersecurity service maturity obligations.
• Collaborates with ISS staff, central IT, distributed IT units, campus stakeholders, business units, institutional partners, and service teams to support system-wide cybersecurity objectives.

Required Qualifications

• Bachelor's (degree must be conferred on or before agreed upon start date)
• In addition to a bachelors degree, two (2) years of experience in an information technology-related field, such as customer support, technical support, systems administration, networking, or similar technical roles.
• Demonstrated ability to support enterprise-scale IT or security environments and perform assigned responsibilities independently within established processes.

Education And Experience Substitutions

• Post-secondary education may substitute for required experience. As a general guideline, one (1) year of full-time experience equals one (1) year of post-secondary education.
• A master’s degree may substitute for up to two (2) years of the required experience.
• Additional post-secondary education may be substituted for required experience on a year-for-year basis, where one (1) year of full-time post-secondary education equals one (1) year of full-time professional experience

Skills, Proficiencies, And/or Knowledge

Demonstrated ability to independently perform cybersecurity analysis and operational tasks within defined service areas; ability to analyze and resolve routine to moderately complex issues; ability to support or lead defined operational activities or workstreams; ability to communicate effectively in verbal and written form; ability to explain technical security concepts to technical and non-technical audiences; demonstrated discretion and sound judgment when handling sensitive or confidential information; and working knowledge of foundational security concepts, vulnerabilities, controls, and mitigation practices.

Preferred Qualifications

• Bachelor's Computer Science, Information Technology, Cybersecurity, Information Systems, or a closely related field.
• Experience supporting enterprise cybersecurity operations, vulnerability management, incident response support, risk assessment activities, compliance support, service documentation, or coordination across multiple IT teams, campuses, or business units in a higher education, research, healthcare, or similarly complex environment.

Certifications, Registrations, And/or Licenses

CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Cisco Certified Network Associate (CCNA), GIAC or other SANS-affiliated cybersecurity certifications, or equivalent industry-recognized security certifications.

Skills, Proficiencies, And/or Knowledge

Strong analytical and problem-solving skills with the ability to manage routine to moderately complex security issues independently; ability to prioritize and execute work in dynamic or high-pressure environments; ability to communicate risk, findings, and recommendations clearly to technical and non-technical stakeholders; strong collaboration skills; experience providing guidance or knowledge sharing to less experienced analysts or student employees; working knowledge of security vulnerabilities, threat mitigation techniques, enterprise security controls, and the NIST Cybersecurity Framework.