IT Security Engineer: SIEM, IDS/IPS & Automation

University of California; Berkeley (CA); On-site; USD 91,500 - 120,000; Full time

Job summary

The Information Security Office at University of California, Berkeley is seeking an IT Security Analyst to join our Security Engineering team. You will focus on systems administration, install, configure and patch security systems, and implement controls to prevent intrusions.

You will write scripts, support DevOps automation, research security solutions, and advise on best practices. This is a full-time exempt role with opportunities for professional development and campus-wide impact.

Qualifications

• Experience reading and interpreting logs from enterprise IT with security focus.
• Ability to learn department processes and procedures.
• Interpersonal skills to collaborate across technical and non-technical teams.
• Experience with IT security systems and tools such as IDS, Vulnerability Scanners, Firewalls, SIEM.
• Advanced knowledge of computer security best practices and policies.

Responsibilities

• Manages Information Security Office systems, install/configure and maintain software.
• Implements security controls to prevent intrusion.
• Researches and implements systems, services, and technology solutions.
• Writes and executes scripts for system management and log analysis.
• Assists in DevOps automation for provisioning and management.
• Triages security incidents and provides analysis for investigations.

Skills

Log analysis

Security monitoring

Incident response

Documentation

Communication

Education

Bachelor's degree in related area

Tools

Ansible

Terraform

Linux (RHEL)

SIEM

Firewalls

Kafka

Elasticsearch

Job description

The Information Security Office at University of California, Berkeley is seeking an IT Security Analyst to join our Security Engineering team. You will focus on systems administration, install, configure and patch security systems, and implement controls to prevent intrusions.

You will write scripts, support DevOps automation, research security solutions, and advise on best practices. This is a full-time exempt role with opportunities for professional development and campus-wide impact.