Information Security Engineer III - 531081

The University of Alabama; Tuscaloosa (AL); Hybrid; USD 75,000 - 101,000; Full time

Job summary

The University of Alabama's Information Security Engineering team seeks an Information Security Engineer III to oversee the university's security program. You will monitor tools, manage incidents, conduct risk assessments, and guide analysts in incident resolution, with emphasis on protecting computing assets from unauthorized access.

Work includes maintaining security infrastructure, applying policy changes, researching regulatory requirements, and coordinating with teams to implement

Qualifications

• Master's degree and two (2) years of IT security engineering experience; OR bachelor's degree and four (4) years of IT security engineering experience; OR associate's degree and six (6) years of IT experience to include four (4) years of IT security engineering.
• Must be able to obtain and maintain security clearance. U.S. Citizenship or U.S. Permanent Resident required. DoD 8570 IAM Level III/IAT Level III certifications.

Responsibilities

• Oversee and improve the university's information security program and infrastructure.
• Monitor security tools and respond to incidents and alerts.
• Conduct risk assessments, vulnerability assessments, and regulatory compliance reviews.
• Research evolving regulations and threat information to inform policy updates.
• Guide Security Analysts in incident resolution and remediation.

Skills

Security concepts

Troubleshooting

Networking basics

Communication

Education

Master's degree

Bachelor's degree

Associate's degree

High school diploma

Tools

PowerShell

Python

Azure Government

Cloud platforms

Job description

Pay Grade/Pay Range:

Minimum: $74,900 - Midpoint: $101,100 (Salaried E12)

Department/Organization:

200721 - Enterprise Technology

Normal Work Schedule:

Monday - Friday 8:00am to 5:00pm

Note to Applicants:

Position is eligible for hybrid work subject to University policy.

Job Summary:

The Information Security Engineer III assists with oversight of a comprehensive information security program to ensure security technology, tools, processes, procedures, reporting, and remediation are put into place and maintained to protect the University’s computing assets from unauthorized access, modification, destruction, or disclosure. Operates various high-complexity security infrastructure components. Monitors and maintains security tools and systems. Backs up triage of alerts, tickets, and incidents as needed. Assists and guides Security Analysts in resolution of alerts as needed. Conducts risk assessments, security compliance reviews, and vulnerability assessments. Researches regulatory, risk, threat information, new regulations or changes to existing regulations and new risk or threat information. Initiates changes in security technology, processes, and policies. Completes training annually to increase security knowledge and skills.

Additional Department Summary:

Works as part of the Research Information Security and Engineering team. Creates and oversees the implementation of security policies and procedures to protect computer networks and information. Builds, maintains, and upgrades security technology to ensure secure operations of computer networks and information, especially those supporting Classified Information and Controlled Unclassified Information (CUI). Performs regular vulnerability scans and plans mitigation strategies. Assesses system vulnerabilities and security risks and proposes and implements strategies to mitigate those risks. Responsible for planning system upgrades, troubleshooting, and developing/maintaining security best practices. Monitors and reports on security incidents and vulnerabilities.

Required Minimum Qualifications:

Master's degree and two (2) years of IT security engineering experience; OR bachelor's degree and four (4) years of IT security engineering experience; OR associate's degree and six (6) years of IT experience to include four (4) years of IT security engineering; OR high school diploma or GED and eight (8) years of IT experience to include four (4) years of IT security engineering.

Additional Required Department Minimum Qualifications:

Must be able to obtain and maintain security clearance. Due to requirements of the funding source, must be a U.S. Citizen or U.S. Permanent Resident. Current DoD 8570 IAM Level III or IAT Level III certifications. (DoD Approved 8570 Baseline Certifications – DoD Cyber Exchange).

Skills and Knowledge:

Knowledge of protecting information and systems within Classified and Controlled Unclassified Information (CUI) environments. Advanced troubleshooting skills. Basic networking skills. Good communication skills and ability to work closely with internal teams and customers to ensure positive outcomes.

Preferred Qualifications:

Experience managing cloud platforms. Experience with PowerShell or Python scripting. Experience with Azure government clouds (GCC, GCC High, DoD). Experience in higher education or defense research environments. Understanding of NIST SP 800-171 and CMMC.

Background Investigation Statement:

Prior to hiring, the final candidate(s) must successfully pass a pre-employment background investigation and information obtained from social media and other internet sources. A prior conviction reported as a result of the background investigation DOES NOT automatically disqualify a candidate from consideration for this position. A candidate with a prior conviction or negative behavioral red flags will receive an individualized review of the prior conviction or negative behavioral red flags before a hiring decision is made.

Equal Employment Opportunity

The University of Alabama is an Equal Employment/Equal Educational Opportunity Institution. All qualified applicants will receive consideration for employment or volunteer status without regard to any legally protected basis and will not be discriminated against because of their protected status. Applicants and employees of this institution are protected under Federal law from discrimination on several bases. More information is available in the EEOC’s Know Your Rights: Workplace discrimination is illegal poster.

The University of Alabama affirms its longstanding commitment to institutional neutrality, free speech, and academic freedom.