IT Security Analyst: SIEM & Systems Engineering

University of California-Berkeley

Berkeley (CA)

On-site

USD 91,500 - 120,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

University of California, Berkeley is seeking a seasoned IT Security Analyst to join the Security Engineering team on campus. The role focuses on systems administration, deployment of security controls, and scripting to support multiple integrated systems.

You will research and implement systems, services, and technology solutions for Information Security Office systems, while contributing to DevOps automation and secure software practices across campus infrastructure.

Qualifications

Experience reading and interpreting logs from a broad range of applications and services used in enterprise IT, with a focus on security relevant logs.
Ability to follow and/or learn department processes and procedures.
Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.
Experience using IT security systems and tools, such as Intrusion Detection Systems, Vulnerability Scanners, Firewalls, Security Information and Event Management systems.
Advanced knowledge of computer security best practices and policies including demonstrated experience securing server-based software.
Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.
Knowledge of computer hardware, software and network security issues and approaches.
Experience with Linux systems, particularly Redhat Enterprise Linux.
Familiarity with web servers, load balancers, firewalls, and DNS.
Ability to write technical documentation in a clear and concise manner.
Understanding of system performance monitoring and actions that can be taken to improve or correct performance.
General knowledge of other areas of IT.
Thorough understanding of and experience with systems and security issues and corrective actions.
Experience automating systems build and provisioning using tools such as Ansible and Terraform.

Responsibilities

Manages Information Security Office systems, including the installation, configuration, maintenance, and support of systems and software.
Implements security controls according to best practices to prevent malicious intrusion of systems.
Researches, evaluates, and implements systems, services, and technology solutions that support Information Security Office systems and services.
Performs system or device enhancements such as software, hardware, and network configuration, updates and installations for projects or services of moderately complex scope.
Writes and executes complex scripts in support of systems management, log analysis and other duties for multiple integrated systems.
Assist in implementing and maintaining various DevOps processes to automate systems provisioning and management.
Implements complex and broad-scale security controls to prevent and detect unauthorized access or changes to campus hardware, software and network infrastructure.
Systems such as Firewalls, IDS/IPS, EDR agents, Vulnerability Scanners, and SIEM.
Provides research, analysis and solutions to address attempted efforts to compromise security protocols.
Advises the campus community on security prevention, best practices and secure software.
Serves as a subject matter expert, providing analysis and context for security investigations and incidents.
Triages security incidents and support tickets as part of a periodic analyst rotation; may participate in responding to security events and operational issues.
Participates in professional development and training activities to maintain expertise in information security, security engineering, and related technologies.
Stays current with evolving threats, tools, and industry best practices, contributes to team knowledge sharing and documentation efforts and performs other duties as assigned.