Cybersecurity Engineer (GTRI-Info & Cybersecurity Dept)

Georgia Institute of Technology; Atlanta (GA); On-site; USD 112,000 - 164,000; Full time

Job summary

Georgia Institute of Technology in Atlanta seeks Cybersecurity Operations Analysts to monitor and analyze security events and incidents, identifying threats and vulnerabilities across the institution's information systems.

You will respond to incidents, conduct investigations, and provide remediation recommendations to improve security posture while supporting audits and compliance efforts. This role emphasizes proactive monitoring, incident response planning, and staff education.

Qualifications

• Associate degree in related discipline or equivalent, related experience.
• Six or more years of relevant experience.
• Ability to obtain a secret security clearance (preferred).
• Baseline certifications such as Splunk Cloud/Enterprise Admin or CrowdStrike Falcon Responder (preferred).

Responsibilities

• Monitor and analyze security events and alerts continuously to detect potential threats and vulnerabilities within the institution's information systems.
• Respond to security incidents by conducting thorough investigations, documenting findings, and implementing corrective actions to mitigate risks.
• Conduct regular security assessments and vulnerability scans to identify weaknesses in systems and applications, providing recommendations for remediation.
• Prepare detailed reports on security incidents, including analysis of the incident, impact assessment, and recommendations for future prevention.
• Stay informed about emerging cybersecurity threats and trends, evaluating their potential impact on the institution and adjusting security measures accordingly.
• Provide support during security audits and compliance assessments, ensuring that the institution meets regulatory requirements and industry standards.
• Develop and implement security monitoring and logging strategies to enhance the detection of suspicious activities and facilitate incident response.
• Train and educate staff on security best practices, fostering a culture of cybersecurity awareness throughout the institution.
• Collaborate with the cybersecurity team to develop and maintain incident response plans and procedures that outline the institution's approach to handling security incidents.
• Perform other duties as assigned.

Skills

Security monitoring

Incident analysis

Vulnerability scanning

Communication skills

Security standards

Education

Associate degree

Bachelor's degree or equivalent

Tools

Splunk ES

SOAR

Splunk Enterprise

Job description

Job Summary

Cybersecurity Operations Analysts monitor and analyze security events and incidents to identify potential threats and vulnerabilities within the institution's information systems. This role involves responding to security incidents, conducting investigations, and providing recommendations for improving the institution's cybersecurity posture.

Responsibilities

• Monitor and analyze security events and alerts continuously to detect potential threats and vulnerabilities within the institution's information systems.
• Respond to security incidents by conducting thorough investigations, documenting findings, and implementing corrective actions to mitigate risks.
• Conduct regular security assessments and vulnerability scans to identify weaknesses in systems and applications, providing recommendations for remediation.
• Prepare detailed reports on security incidents, including analysis of the incident, impact assessment, and recommendations for future prevention.
• Stay informed about emerging cybersecurity threats and trends, evaluating their potential impact on the institution and adjusting security measures accordingly.
• Provide support during security audits and compliance assessments, ensuring that the institution meets regulatory requirements and industry standards.
• Develop and implement security monitoring and logging strategies to enhance the detection of suspicious activities and facilitate incident response.
• Train and educate staff on security best practices, fostering a culture of cybersecurity awareness throughout the institution.
• Collaborate with the cybersecurity team to develop and maintain incident response plans and procedures that outline the institution's approach to handling security incidents.
• Perform other duties as assigned.

Required Qualifications

Educational Requirements

Associate degree in related discipline or equivalent, related experience.

Required Experience

Six or more years of relevant experience.

Preferred Qualifications

Additional Preferred Qualifications

• Ability to obtain a secret security clearance
• Experience in implementing Splunk applications, tools, and add-ons, including ES and SOAR
• Solid technical understanding of cybersecurity concepts, standards, guidelines, and principles
• Strong written and oral communication skills
• One or more baseline specialized certifications such as: Splunk Cloud Certified Admin, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Crowdstrike Certified Falcon Responder

Preferred Educational Qualifications

Bachelor's degree in related discipline or equivalent, related experience.

Other Information

• This is not a supervisory position.
• This position does not have any financial responsibilities.
• This position will not be required to drive.
• This role is considered a position of trust.
• This position does not require a purchasing card (P-Card).
• This position will not travel
• This position does not require security clearance.

Salary Range: $112,410. - $164,062.

Atlanta, GA

Background Check

Successful candidate must be able to pass a background check.

Equal Employment Opportunity

The Georgia Institute of Technology (Georgia Tech) is an Equal Employment Opportunity Employer. The Institute is committed to maintaining a fair and respectful environment for all. To that end, and in accordance with federal and state law, Board of Regents policy, and Institute policy, Georgia Tech provides equal opportunity to all faculty, staff, students, and all other members of the Georgia Tech community, including applicants for admission and/or employment, contractors, volunteers, and participants in institutional programs, activities, and services. Georgia Tech complies with all applicable laws and regulations governing equal opportunity in the workplace and in educational activities.

Equal opportunity and decisions based on merit are fundamental values of the University System of Georgia ("USG") and Georgia Tech. Georgia Tech prohibits discrimination, including discriminatory harassment, on the basis of an individual's race, ethnicity, ancestry, color, religion, sex (including pregnancy), national origin, age, disability, genetics, or veteran status in its programs, activities, employment, and admissions. Further, Georgia Tech prohibits citizenship status, immigration status, and national origin discrimination in hiring, firing, and recruitment, except where such restrictions are required in order to comply with law, regulation, executive order, or Attorney General directive, or where they are required by Federal, State, or local government contract.