IT Security Specialist/ Analyst I

COLLEGE CORNER; Charleston (SC); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Employee Tuition Assistance Program ( 

ETAP

Job summary

College of Charleston is seeking a Junior Information Security Analyst to support the college’s information security program by monitoring threats, triaging alerts, and assisting incident response. The role helps develop baseline security configurations, supports risk assessments, vulnerability management, and patch management, and implements security controls across servers, endpoints, and networking.

A bachelor’s degree in IT, CS, or related field (or equivalent experience) is required;

Qualifications

• Bachelor's degree in information technology, computer science, or related field or equivalent experience.
• Knowledge of security administration across operating systems and software.
• Ability to document security procedures and communicate to varied audiences.
• Familiarity with risk concepts, IAM, and security frameworks.

Responsibilities

• Monitor and analyze security threats, triage alerts, and assist with incident response.
• Assist in developing baseline security configurations for servers and endpoints.
• Contribute to risk assessments, vulnerability and patch management.
• Develop technical security procedures and implement controls.
• Review security consoles, investigate high-priority notifications, and escalate as needed.

Skills

Threat monitoring

Incident response

Documentation

Identity access management

Security frameworks

Vulnerability management

Patch management

Analytical skills

Communication skills

Education

Bachelor's degree in IT/CS

Tools

SIEM

DLP

Patch management tools

Anti-virus

Job description

*Salary is commensurate with education/experience which exceeds the minimum requirements.

Offers of employment are contingent upon a successful background check.

The Junior Information Security Analyst supports the college’s information security program by monitoring and analyzing threats, triaging alerts, and assisting with incident response. The Analyst balances threat mitigation with the unique needs of academic research, innovation, and compliance requirements. Assists in developing and validating baseline security configurations for server and endpoint operating systems, applications, and networking. Assists with information security risk assessments, vulnerability management, and patch management. Develops technical security procedures and implements security controls.

A bachelor’s degree in information technology systems, computer science, or related field and experience in information technology systems or related area. Relevant experience may be substituted for bachelor’s degree on a year-for-year basis. Candidates with an equivalent combination of experience and/or education are encouraged to apply.

Required Knowledge, Skills and Abilities

Knowledge of security administration for various operating systems and software. Ability to write detailed technical documentation on security procedures. Basic analytical and problem solving skills. Basic knowledge and understanding of information risk concepts and principles as a means of relating business needs and security controls. Knowledge of Identity Access management. Knowledge of security frameworks. Ability to communicate with audiences with varying levels of technical knowledge. Basic knowledge of project management.

Additional Comments Regarding Position

Must be willing to work flexible hours based on position needs. Ability to travel for professional development.

*Salary is commensurate with education/experience which exceeds the minimum requirements.

Offers of employment are contingent upon a successful background check.

• Employee Tuition Assistance Program ( ETAP )

The College of Charleston is an equal opportunity employer and does not discriminate against any individual or group on the basis of sex, gender (including gender identity and/or expression), pregnancy, race, religion, color, national origin, age, disability, military or veteran status, sexual orientation, genetic information, and other classifications protected by applicable federal, state, and local laws. For more information, please visit eop.cofc.edu.

• Actively monitor reporting systems and operations for security issues including network logs, endpoints, and servers.
• Monitor system consoles including but not limited to DLP , SIEM / XDR , anti-virus, patch management, OS,, software inventories and network for potential security threats. Participate in the active remediation of identified vulnerabilities and incidents.
• Conduct initial analysis of suspicious activity, isolate compromised endpoints, and elevate complex threats to the Senior Information Security Analyst following established incident playbooks.
• Review security consoles for anomalies or security threats and remediate any issues identified. Promptly investigate high priority notifications and report findings to the Senior Information Security Analyst.

Essential or Marginal

Percent of Time

Percent of Time 30

Activity

Vulnerability Assessment and Penetration Testing

• Assist with routine vulnerability scans, track patch status, and coordinate remediation efforts.
• Assist clients with validating their remediation effort by re-scanning and reporting results.
• Work closely with IT Enterprise admins on improving and hardening system security posture using security control frameworks.
• Participate in external Penetration Testing exercises and remediation efforts.

Essential or Marginal

Percent of Time

Percent of Time 25

Activity

Security Assessment

• Assist College and IT project teams with security assessment of their projects.
• Collaborate with other IT areas on identifying security concerns, risk and system vulnerabilities (i.e. database managers, system admins and system programmers)
• Review Change Management requests for security risk and make recommendations
• Assist in gathering evidence and documentation for regulatory compliance requirements, including FERPA , GLBA , HIPAA .

Essential or Marginal

Percent of Time

Percent of Time 25

Activity

Documentation

• Create and maintain system scan procedures and documentation of all College data systems for risk analysis purposes.
• Collaborate with the Senior Security Analyst in Project documentation.
• Assist in managing security awareness campaigns, and educate faculty, staff, and students on security best practices.

Essential or Marginal

Percent of Time

Percent of Time 20

Supplemental Questions

Required fields are indicated with an asterisk (*).

• * How did you hear about this employment opportunity?
  • Chronicle of Higher Education
  • CofC - Alumni Career Services
  • College of Charleston Website
  • Diverse: Issues in Higher Education
  • Glassdoor
  • Handshake
  • HigherEdJobs
  • Indeed.com
  • Internal Job Posting
  • jbcjobs (Joint Base Charleston Military & Family Readiness)
  • Job Fair
  • LinkedIn
  • Monster.com
  • Personal Referral
  • Post and Courier
  • Public Job Posting
  • SC Works (SC Department of Employment and Workforce)
  • Twitter
  • Word of mouth
  • Other
  • National Labor Exchange
  • CareerBuilder
  • SpouseWorks

Required DocumentsOptional Documents

• Resume
• Cover Letter / Letter of Application
• Other Document
• Other Document 2
• Other Document 3
• Form DD 214