Endpoint Security Analyst

The Chronicle Of Higher Education, Inc.; North Whitehall Township (PA); On-site; USD 70,000 - 95,000; Full time

Job summary

The Chronicle Of Higher Education, Inc. is seeking an Endpoint Security Analyst to safeguard the institution’s end‑user computing environment.

You will engineer and manage security controls for workstations, mobile devices, and networked printers, collaborating with the IT Support team to balance security with academic productivity. Responsibilities include configuring EDR/NGAV, implementing CIS baselines with Jamf/SCCM/WSUS, patch management, incident triage, scripting for automation, and

Qualifications

• High school diploma or equivalent (required).
• Certification: CompTIA Security+ or CySA+ or equivalent; within 6 months if not held.
• 3–5 years IT support or sysadmin with endpoint security focus.
• Experience with Windows, macOS, iOS, Android security architectures.
• Familiarity with UEM/MDM tools (Jamf, SCCM, WSUS).
• Strong documentation and communication skills.

Responsibilities

• Administer EDR/NGAV across college devices.
• Implement secure baselines for workstations and mobile devices (CIS).
• Maintain standardized workstation configurations.
• Identify and remediate vulnerabilities and patching.
• Develop automation scripts for security audits.
• Secure print environment and ensure print traffic encryption.
• Provide incident triage and initial forensic analysis.
• Maintain operational security manual.
• Assist with compliance reporting (FERPA/GLBA).
• Perform other duties as assigned.

Skills

Windows security

macOS security

iOS security

Android security

Scripting (PowerShell/Python)

Communication skills

Technical documentation

Education

High school diploma or equivalent

Bachelor’s degree in Cybersecurity/IT (preferred)

Tools

UEM (Jamf/SCCM/WSUS)

MDM platforms

PowerShell

Python

Job description

Endpoint Security Analyst

Work Schedule

Full time, 40 hours per week. Must be available to work nights, weekends, and off hours as needed. (The standard work week is Monday through Friday, 8:00 AM to 5:00 PM. Exempt professionals are expected to maintain a flexible schedule to ensure all responsibilities and collegiate needs are met, including occasional work outside of core business hours.)

Summary

The Endpoint Security Analyst is responsible for the security, integrity, and operational health of the institution’s end‑user computing environment. This includes the engineering and management of security controls for workstations (PC/Mac), mobile devices, and networked peripherals such as printers. The position works closely with the IT Support team to uphold academic productivity while maintaining a robust defense against evolving threats. Reports to Director of IT Support Services.

Duties and Responsibilities

• Endpoint Protection Management: Administer and optimize Endpoint Detection and Response (EDR) and Next‑Generation Antivirus (NGAV) solutions across all college‑owned end‑user devices.
• Device Lifecycle Security: Implement and maintain secure configuration baselines (e.g., CIS Benchmarks) for workstations and mobile devices using unified endpoint management (UEM) tools like Jamf, SCCM, and WSUS.
• Workstation Management: Maintain standardized configurations for classroom and administrative workstations to ensure a consistent experience and prevent unauthorized persistent changes to software and settings.
• Vulnerability & Patch Management: Identify, prioritize, and automate the remediation of vulnerabilities on end‑user hardware, including third‑party application patching and firmware updates for networked printers, end‑user workstations (Mac/PC), mobile devices, and other end‑user devices.
• Secure Process Best Practices: Implement and advocate for secure workflows, such as Follow‑Me or authenticated release printing, to prevent sensitive information exposure, reduce waste, and create efficiencies.
• General Print Administration & Support: Provide high‑level support for the college’s networked printing environment, ensuring high availability of services while managing driver deployment and printer configuration via centralized management tools.
• Print Infrastructure Security: Secure the printing environment by hardening device firmware, disabling insecure protocols (e.g., Telnet, FTP), and ensuring all print traffic is encrypted across the campus network.
• Incident Triage: Serve as the primary security escalation point for the IT Support desk, investigating alerts from endpoint sensors and performing initial forensic analysis of potentially compromised devices.
• Security Automation: Develop scripts (PowerShell, Bash, or Python) to automate routine security audits and the deployment of security agents across the enterprise.
• Compliance & Reporting: Monitor and report on endpoint compliance with federal and state regulations (e.g., FERPA, GLBA) and institutional security policies.
• Maintain and update an operational manual.
• Perform other duties or special projects as assigned.

Required Qualifications

Education

• High school diploma or equivalent.
• CompTIA Security+ or CySA+ or related cybersecurity certification. If not in possession, must acquire within the first 6 months of employment.

Certifications

• Act 153 Clearances (Act 34 PA Criminal Background, Act 151 PA Child Abuse History, Act 114 FBI Clearance Fingerprinting).

Work Experience

• 3-5 years of experience in IT support or systems administration with a heavy focus on endpoint security and device management.

Knowledge, Skills, Abilities

• In-depth knowledge of Windows, macOS, iOS, and Android security architectures.
• Experience with Unified Endpoint Management (UEM) and Mobile Device Management (MDM) platforms.
• Proficiency in scripting for automation (e.g., PowerShell or Python) to manage large‑scale device environments.
• Knowledge of common attack vectors targeting end‑users, such as phishing, credential theft, and drive‑by downloads.
• Ability to communicate complex technical security concepts to non‑technical faculty, staff, and students.
• Demonstrated ability to create clear, concise, and comprehensive technical documentation for both technical and non‑technical audiences.
• Strong written communication skills with the ability to develop and maintain accurate technical documentation for diverse audiences.

Preferred

• Bachelor’s degree in Cybersecurity, Information Technology, or related field from an accredited institution.
• Experience in a Higher Education environment, particularly within a community college setting.
• Current certifications such as CompTIA Security+, CySA+, or vendor‑specific certifications (e.g., Microsoft 365 Certified: Endpoint Administrator Associate).

Physical Demands

While performing the duties of this job, the employee is frequently required to stand; walk; sit; use hands to handle or feel; reach with hands and arms; talk and hear. The employee may regularly lift and/or move up to 25 pounds and occasionally lift and/or move up to 50 pounds. Specific vision abilities required by this job include close vision and distance vision.

Work Environment

The noise level in the work environment is usually quiet to moderate. This position will be required to work evening and weekend hours as needed.

Please note that this position is not eligible for current or future H-1B or other employment visa sponsorship.

LCCC is an equal opportunity employer.

Internal candidates must apply within 15 days of posting.

Position open until filled.

• Salary is restricted to above range and will not exceed the maximum of the range. Salary offers are non‑negotiable and offers are determined and are based upon related work experience submitted on resume.
• Foreign degrees – must provide a U.S. equivalency report of your degree credentials with your transcript; if not, your resume will not be accepted.