Cybersecurity Threat and Vulnerability Analyst

Embedded Shishya; United States; Hybrid; USD 75,000 - 120,000; Full time

Benefits offered by this job

Health benefits

Retirement plan

Paid time off

Tuition assistance

Professional development

Employee discount

Job summary

The Cybersecurity Threat and Vulnerability Analyst at University of Texas at Austin collaborates with risk management engineers to evaluate daily campus threats and vulnerabilities, developing response protocols to reduce risk. You will work within an office that values balance, creativity, and serving others.

Responsibilities include vulnerability assessments, reporting, and improving automated workflows while staying current with evolving threats and technologies used by the university.

Qualifications

• 1+ year of experience supporting vulnerability management tools and technologies.
• U.S. Citizen, resident, or officially recognized asylee with eligibility for government security access.
• Strong interest in cybersecurity and keen data analysis skills.
• Ability to work independently and in a team in a fast-paced environment.
• Excellent communication skills, both written and oral.

Responsibilities

• Discover and investigate security vulnerabilities including zero days.
• Analyze vulnerability data to assess priority and impact on campus.
• Publish vulnerability measures and reports accurately and promptly.
• Improve vulnerability management programs and automate processes.

Skills

Vulnerability management

Cybersecurity

Communication skills

Problem solving

Tools

Python

Splunk

Linux

Job description

Cybersecurity Threat and Vulnerability Analyst

Hiring Department: Information Security Office

Position Open To: All Applicants

Weekly Scheduled Hours: 40

FLSA Status: Exempt from FLSA

Earliest Start Date: Immediately

Position Duration: Expected to Continue

Location: UT MAIN CAMPUS

Job Details

Remote work allowed. Remote work for individuals who reside outside Texas but within the United States and its territories will be considered and requires Central Office approval.

The most important ingredients for success on this team are a strong ability to think creatively about problems, very strong communication skills, and a passion to learn and share knowledge.

You will get to work with a very intelligent and dedicated team to address enterprise cybersecurity challenges through novel approaches in an office that highly values work-life balance, the freedom to explore out of the box ideas, and serving others.

Most importantly, you will help take our tools and ideas to the next level. What starts here changes the world!

Your skills will make a difference.

You’ll be working for a university that is internationally recognized for our academic programs and research. Your work will contribute to operational excellence and enhance the student experience. If you’re the type of person that wants to know your work has meaning and impact, you’ll like working in our department and for UT Austin.

Benefits

• Competitive health benefits (employee premiums covered at 100%, family premiums at 50%)
• Voluntary Vision, Dental, Life, and Disability insurance options
• Generous paid vacation, sick time, and holidays
• Teachers Retirement System of Texas, a defined benefit retirement plan, with employer matching funds
• Additional Voluntary Retirement Programs: Tax Sheltered Annuity 403(b) and a Deferred Compensation program 457(b)
• Flexible spending account options for medical and childcare expenses
• Robust free training access through LinkedIn Learning plus professional conference opportunities
• Tuition Assistance
• Expansive employee discount program including athletic tickets
• Free access to UT Austin's libraries and museums with staff ID card
• Free rides on all UT Shuttle and Austin CapMetro buses with staff ID card

This position requires you to maintain Internet service and a mobile phone with voice and data plans to be used when required for work.

Must be authorized to work in the United States on a full-time basis for any employer without sponsorship.

Purpose

The Cybersecurity Threat and Vulnerability Analyst will collaborate with a small team of risk management engineers to evaluate daily threats relative to vulnerabilities present on campus and will develop response protocols and reports to effectively reduce risk and manage threats.

Responsibilities

• Discover and investigate security vulnerabilities including zero days.
• Analyze technical data of vulnerabilities to allow an appropriate assessment of priority and potential impact to campus.
• Ensure accurate and timely publication of vulnerability measures and reports.
• Provide regular quality improvement of the vulnerability management program, in particular automated processes, communication, and vulnerability alert scheduling.
• Communicate and share technical knowledge with risk management team along with suggestions for prioritized approaches needed to address gaps in vulnerability management.
• Assist the Information Security Office’s Risk Management team in performing: Vulnerability assessments, Risk Assessments, Zero Day exposure analysis and compensating controls.
• Create reports and documentation for vulnerability management.
• Stay informed of latest threats, security vulnerabilities, and recommend solutions for technology in use by the university.
• Other related functions as assigned.

Required Qualifications

• U.S. Citizen, resident, or officially recognized asylee - Applicant selected will be subject to government security investigation and must meet eligibility requirements for access to classified information at the level appropriate to the project requirements of the position.
• At least 1 year of relevant experience supporting vulnerability management tools and technologies
• Strong interest in the cybersecurity field
• Excellent problem-solving and data analysis skills as well as a keen eye for detail to identify and resolve issues effectively
• Ability to work independently and collaboratively, and ability to manage parallel activities in a fast-paced, dynamic team environment
• Strong synchronous and asynchronous communication skills
• Self-motivated to learn and share knowledge

Preferred Qualifications

• Basic Python / Scripting skills
• Strong familiarity with vulnerability measurement and rating systems (e.g., CVE, CVSS, CISA Known Exploited Vulnerabilities)
• Basic knowledge of SIEM tools such as Splunk.
• Basic knowledge of Linux Administration
• Basic knowledge of vulnerability scanning tools such as Nmap and Tenable Nessus.

Salary Range

$75,000 + depending on qualifications

Working Conditions

• May work around standard office conditions
• Repetitive use of a keyboard at a workstation
• Use of manual dexterity

Required Materials

• Resume/CV
• 3 work references with their contact information; at least one reference should be from a supervisor
• Letter of interest

Employment Eligibility

Regular staff who have been employed in their current position for the last six continuous months are eligible for openings being recruited for through University-Wide or Open Recruiting, to include both promotional opportunities and lateral transfers. Staff who are promotion/transfer eligible may apply for positions without supervisor approval.

Retirement Plan Eligibility

The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length.

Background Checks

A criminal history background check will be required for finalist(s) under consideration for this position.

Equal Opportunity Employer

The University of Texas at Austin, as an equal opportunity/affirmative action employer, complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions.

Pay Transparency

The University of Texas at Austin will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

Employment Eligibility Verification

If hired, you will be required to complete the federal Employment Eligibility Verification I-9 form. You will be required to present acceptable and original documents to prove your identity and authorization to work in the United States. Documents need to be presented no later than the third day of employment. Failure to do so will result in loss of employment at the university.

E-Verify

The University of Texas at Austin use E-Verify to check the work authorization of all new hires effective May 2015. The university’s company ID number for purposes of E-Verify is 854197. The following posters are available:

• E-Verify Poster (English and Spanish) [PDF]
• Right to Work Poster (English) [PDF]
• Right to Work Poster (Spanish) [PDF]

Compliance

Employees may be required to report violations of law under Title IX and the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act). If this position is identified a Campus Security Authority (Clery Act), you will be notified and provided resources for reporting. Responsible employees under Title IX are defined and outlined in HOP-3031.

The Clery Act requires all prospective employees be notified of the availability of the Annual Security and Fire Safety report. You may access the most recent report here or obtain a copy at University Compliance Services, 1616 Guadalupe Street, UTA 2.206, Austin, Texas 78701.