Information Security Engineer III

University of Alabama; Tuscaloosa (AL); Hybrid; USD 75,000 - 101,000; Full time

Job summary

Cybersecurity Jobs supports the University’s information security program by operating and improving security infrastructure, tools, and risk controls. The hybrid role in Tuscaloosa requires monitoring, incident triage, risk assessments, and collaboration across Enterprise Technology.

Advanced certification (CISSP, GCIH, GCIA or equivalent) is required on hire or within six months. The position emphasizes protecting data, configuring security controls, and maintaining regulatory compliance.

Qualifications

• Master’s or bachelor’s degree with corresponding IT security experience.
• Advanced certification required within 6 months: CISSP, GCIH, GCIA or similar.
• Experience across security tooling, risk assessments, and regulatory frameworks.

Responsibilities

• Assist oversight of a comprehensive information security program and protect computing assets.
• Operate and monitor high-complexity security infrastructure components and tools.
• Perform triage and guide Analysts in resolving alerts and incidents.
• Conduct risk assessments, compliance reviews, and vulnerability testing.
• Configure and maintain security controls, DLP and related policies.

Skills

IT security engineering

Security operations

Risk assessments

Regulatory compliance

Education

Master’s degree

Bachelor’s degree

Associate’s degree

High school diploma or GED

Tools

DLP

SIEM

Microsoft 365 security tools

Secure web gateways

Endpoint protection

Vulnerability management tools

Job description

Support the University’s information security program by operating and improving security infrastructure, tools, and risk controls.

Responsibilities

• Assist with oversight of a comprehensive information security program to establish and maintain security technology, tools, processes, procedures, reporting, and remediation to protect computing assets from unauthorized access, modification, destruction, or disclosure.
• Operate various high-complexity security infrastructure components.
• Monitor and maintain security tools and systems.
• Perform triage support for alerts, tickets, and incidents as needed.
• Assist and guide Security Analysts in resolving alerts when required.
• Conduct risk assessments, security compliance reviews, and vulnerability assessments.
• Research regulatory, risk, and threat information, including new regulations and changes to existing regulations, as well as emerging risk and threat data.
• Initiate changes in security technology, processes, and policies.
• Complete required training annually to expand security knowledge and skills.
• Administer, maintain, and improve information security tools, including data loss prevention (DLP) technologies across email, endpoint, and web.
• Configure security controls and monitoring alerts; investigate potential data exposure events; support policy enforcement across the organization’s technology environment.
• Support other enterprise security platforms, including secure web access gateways and anti-malware/endpoint protection tools, along with other information security technologies.
• Collaborate with Security Operations, Identity and Access Management, Infrastructure, Compliance, and business stakeholders to ensure security tools are effective, properly tuned, and aligned with organizational risk management goals.
• Assist and guide security analysts and less senior engineers as needed.

Requirements

• Master’s degree and 2 years of IT security engineering experience
• OR bachelor’s degree and 4 years of IT security engineering experience
• OR associate’s degree and 6 years of IT experience including 4 years of IT security engineering
• OR high school diploma or GED and 8 years of IT experience including 4 years of IT security engineering
• Advanced certification required upon hire or within 6 months of employment: CISSP and GCIH, GCIA, or similar.

Technologies

• Data loss prevention (DLP)
• CISSP, GCIH, GCIA
• SIEM
• Vulnerability management tools
• Microsoft 365
• Secure web access gateways
• Anti-malware/endpoint protection tools
• Web filtering
• Encryption
• FERPA, HIPAA, GLBA, PCI DSS, CMMC, NIST

Work Details

• Location: Tuscaloosa, AL (hybrid) subject to University policy
• Pay range: USD 74,900 to 101,100 per year (Salaried E12; minimum to midpoint)
• Schedule: Monday to Friday, 8:00am to 5:00pm
• Department/Organization: 200721 - Enterprise Technology
• Closing date: Nov 30 2026 - 22:55 CST

Background Investigation

• Final candidate(s) must pass a pre-employment background investigation.
• Information from social media and other internet sources may be used.
• A prior conviction reported from the background investigation does not automatically disqualify a candidate.
• Prior convictions or negative behavioral red flags are reviewed individually before a hiring decision.

Preferred Qualifications

• Experience administering or supporting enterprise security technologies including DLP, endpoint protection, email security, web filtering, secure web gateways, SIEM, or vulnerability management tools.
• Working knowledge of data protection concepts such as sensitive data discovery, data classification, encryption, access controls, and policy enforcement.
• Familiarity with regulatory and compliance requirements including FERPA, HIPAA, GLBA, PCI DSS, CMMC, NIST, or other data protection frameworks.
• Familiarity with Microsoft 365 security tools, endpoint management platforms, directory services, and identity-based access controls.