Information Security Analyst I

University of Kansas Medical Center; United States; Hybrid; USD 61,000 - 91,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off

Retirement program

Job summary

University of Kansas Medical Center is seeking an Information Security Analyst I to join the Information Security team. You will monitor security events, analyze incidents, and support incident response and remediation to protect data assets across networks, endpoints, and infrastructure.

The role requires hands-on troubleshooting, documentation, and collaboration with IT staff to enforce security requirements and manage risks associated with new technology and security exceptions.

Qualifications

• Two (2) years’ experience in information security or related field.
• One (1) year of progressive work experience in information technology or information security.
• Experience working with networking architectures, topologies, practices, and technologies.
• Experience handling information involving privacy and confidentiality and applying appropriate judgment in its use and disclosure.

Responsibilities

• Perform real-time security log and event analysis and take action within defined parameters to contain and mitigate threats and elevate based upon severity.
• Develop and maintain security operations documentation, including procedures, playbooks, escalation paths, and incident records.
• Develop strategies and plans with leadership to enforce security requirements and address identified risks.
• Detect and report residual risks, vulnerabilities, and other security exposures to IS management, including misuse of information assets and noncompliance.
• Review security authorization and exception requests, provide risk-based recommendations, and elevate requests that exceed established approval authority.
• Monitor reports and security logs for unusual events.
• Investigate events and data to determine appropriate resolution.
• Research and assess new threats and security alerts and recommend remedial actions.
• Monitor KUMC’s networks for security breaches and investigate violations.
• Monitor intrusion detection and prevention systems, network vulnerability systems, antivirus, and encryption systems.
• Respond to and elevate events and maintain documented monitoring and response processes.
• Analyze logs from a variety of source systems to construct the narrative of a security incident.
• Support information security incident management activities, including triage, investigation, containment, remediation, recovery, documentation and post-incident review.
• Provide future support and guidance to IT support staff and users on security issues.

Skills

Problem solving

Communication

Organization

Collaboration

Attention to detail

Interpersonal skills

Time management

Multitasking

Education

Bachelor's degree in information security, computer science, engineering, telecommunications, systems administration, or another related technical field

Job description

Department: Information Security Administration ----- Information Security Fusion Center

Position Title: Information Security Analyst I

Job Family Group: Professional Staff

Job Description Summary

The Information Security Analyst (ISA) is a member of the Information Security (IS) team and supports the operation of KUMC’s information security program. This includes a primary focus on detecting and preventing information security and cyber threats to the organization by correlating data to identify weaknesses within infrastructure, including software, hardware, and networks, and implementing measures to protect information assets. The analyst is responsible for initial response to and troubleshooting cybersecurity, networking, and endpoint incidents; operational ticket-based work; front line monitoring of network devices, data center equipment, and other enterprise information security architecture items; as well as risk reviews for new technology and security exceptions. The ISA is responsible for day-to-day operational security tasks. This individual helps guide our security operations program. The ISA participates in the identification, tracking, and monitoring of information security threats and service operations. The analyst utilizes established processes and tools for incident response, threat identification, analysis, and remediation. This position participates in the implementation and integration of risk management procedures.

Job Duties

Perform real-time security log and event analysis and take action within defined parameters to contain and mitigate threats and elevate based upon severity. Review and analyze security events, determine severity, and author reports detailing the activity. Develop and maintain security operations documentation, including procedures, playbooks, escalation paths, and incident records. Develop strategies and plans with leadership to enforce security requirements and address identified risks. Detect and report residual risks, vulnerabilities, and other security exposures to IS management, including misuse of information assets and noncompliance. Review security authorization and exception requests, provide risk-based recommendations, and elevate requests that exceed established approval authority. Monitor reports and security logs for unusual events. Investigate events and data to determine appropriate resolution. Research and assess new threats and security alerts and recommend remedial actions. Monitor KUMC’s networks for security breaches and investigate violations. Monitor intrusion detection and prevention systems, network vulnerability systems, antivirus, and encryption systems. Respond to and elevate events and maintain documented monitoring and response processes. Analyze logs from a variety of source systems to construct the narrative of a security incident. Support information security incident management activities, including triage, investigation, containment, remediation, recovery, documentation and post-incident review. Provide future support and guidance to IT support staff and users on security issues.

Work Environment

Must be available to participate in an on-call rotation schedule. May be required to work outside normal business hours, including nights, weekends, and holidays to support incident response activities. This position is eligible for a hybrid work arrangement, with in-person work required at least one day a week and at other times based on operational or incident-response needs.

Required Qualifications

Work Experience: Two (2) years’ experience in information security, computer science, engineering, telecommunications, systems administration, or related technical field. Relevant education may be substituted for experience on a year for year basis. One (1) year of progressive work experience in information technology or information security. Experience working with networking architectures, topologies, practices, and technologies. Experience handling information involving privacy and confidentiality and applying appropriate judgment in its use and disclosure. Experience providing technical support or security guidance to customers, users, or stakeholders.

Preferred Qualifications

Education: Bachelor’s degree in information security, computer science, engineering, telecommunications, systems administration, or another related technical field. Certifications/Licenses: CompTIA Network+, CompTIA Security+, (ISC)2 SSCP, or EC-Council ECSA certification, or an equivalent certification. ITIL Foundations certification or higher. Work Experience: Experience with endpoint security tools. Related work experience in a higher education or academic health care organization. Experience with SIEM technologies.

Skills

Problem solving Communication Organization Collaboration Attention to detail Interpersonal skills Time management Multitasking Customer service Comprehensive Benefits Package: Coverage begins on day one for health, dental, and vision insurance and includes health expense accounts with generous employer contributions if the employee participates in a qualifying health plan. Employer-paid life insurance, long-term disability insurance, and various additional voluntary insurance plans are available. Paid time off, including vacation and sick, begins accruing upon hire, plus ten paid holidays. One paid discretionary day is available after six months of employment, and paid time off for bereavement, jury duty, military service, and parental leave is available after 12 months of employment. A retirement program with a generous employer contribution and additional voluntary retirement programs (457 or 403b) are available. https://www.kumc.edu/human-resources/benefits.html

Employee Type

Regular

Time Type

Full time

Rate Type

Salary

Compensation Statement

The pay range listed for this position is determined by our compensation program using market data and salary benchmarking. A combination of factors is considered in making compensation decisions including, but not limited to, education, experience and training, qualifications relative to the requirements of the position, and funding. At the University of Kansas Medical Center, a reasonable estimate for the starting pay range will be the minimum to midpoint of the posted range, taking into account the combination of factors listed above.

Pay Range

$60,800.00 - $91,200.00 Minimum $60,800.00 Midpoint $76,000.00 Maximum $91,200.00

The mission of the University of Kansas Medical Center

The mission of the University of Kansas Medical Center is to improve lives and communities in Kansas and beyond through innovation in education, research, and health care. The University of Kansas Medical Center is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, ethnicity, ancestry, age, protected veteran or disability status, marital status, parental status, or genetic information. http://policy.ku.edu/IOA/nondiscrimination https://kumc-publicpoliciesandprocedures.policystat.com/policy/8446235/latest/ Under Kansas state law, certain KUMC positions are subject to disability preference. For positions subject to this requirement, KUMC will offer an interview to a person who has applied for an open position who is qualified, with or without reasonable accommodation, to meet the performance standards of the position and who has presented acceptable proof of disability. If the position you apply for is subject to the disability preference requirement, you will be asked to provide information in support of your request for disability preference when you complete the application for employment. https://civilrights.ku.edu/annual-security-and-fire-safety-report https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf https://www.laborposters.org/federal/1606-federal-pay-transparency-poster.htm