Information Security Engineer III - 531108

The University of Alabama; Tuscaloosa (AL); Hybrid; USD 67,000 - 82,000; Full time

Job summary

The University of Alabama is seeking an Information Security Engineer III to help run the university's information security program. You will operate and tune enterprise security tools with a focus on data loss prevention across email, endpoint, and web to protect institutional data from unauthorized access or exposure.

You will collaborate with security operations, IAM, infrastructure, and compliance teams while guiding security analysts and less senior engineers in resolving alerts and

Qualifications

• Master's degree with 2+ years IT security engineering experience or Bachelor's with 4+ years in IT security.
• Advanced certifications such as CISSP plus GCIH/GCIA on hire or within 6 months.
• Experience with DLP, endpoint protection, email security, SIEM and vulnerability management.

Responsibilities

• Administer, maintain, and improve security tools, including DLP across email, endpoints and web.
• Operate high-complexity security infrastructure and monitor for issues.
• Back up triage of alerts, tickets, and incidents, guiding analysts to resolution.
• Conduct risk assessments, security compliance reviews, and vulnerability assessments.
• Initiate changes to security technology, processes, and policies; complete annual security training.

Skills

Data security

Incident response

Regulatory compliance

Education

Master's degree in IT security or related field

Bachelor's degree in IT or related field

Tools

DLP software

SIEM

Vulnerability management tools

Microsoft 365 security tools

Job description

University of Alabama is hiring an Information Security Engineer III - 531108. The role helps run the university's information security program, operating and tuning enterprise security tools, with a focus on data loss prevention across email, endpoint, and web, to protect institutional data from unauthorized access or exposure. The engineer works with security operations, identity and access management, infrastructure, and compliance teams, and guides security analysts and less senior engineers in resolving alerts.

Highlights

• Administer, maintain, and improve the university's information security tools, including data loss prevention technologies across email, endpoint, and web, configuring controls and investigating potential data exposure events.
• Operate high-complexity security infrastructure, including secure web access gateways and anti-malware and endpoint protection tools, and monitor these systems for problems.
• Back up triage of alerts, tickets, and incidents, and guide security analysts through resolving alerts.
• Conduct risk assessments, security compliance reviews, and vulnerability assessments, and research new threats and regulatory changes.
• Initiate changes to security technology, processes, and policies, and complete security training each year.
• Hold a master's degree with two years of IT security engineering experience, or a bachelor's degree with four years, with equivalent combinations of lower degrees and longer IT experience also accepted.
• Obtain an advanced certification such as CISSP plus GCIH, GCIA, or similar upon hire or within six months of employment.
• Preferred experience with DLP, endpoint protection, email security, SIEM, or vulnerability management tools, plus familiarity with FERPA, HIPAA, PCI DSS, NIST, and Microsoft 365 security tools.
• Pay starts at a minimum of $74,900 with a midpoint of $101,100 (Salaried E12), working Monday through Friday, 8:00am to 5:00pm, with hybrid work eligibility under university policy.