IT Security Specialist II: Threat & Vulnerability Lead

University of Miami; Miami (FL); On-site; USD 110,000 - 135,000; Full time

Job summary

The University of Miami Health System ("UHealth") IT Department seeks an IT Security Specialist II to join the Miami team in a full-time capacity. The role focuses on end-user and technical security training, awareness, and supporting PCI-DSS compliance, auditing, risk management, and security assessments under the CISO office.

Responsibilities include threat intelligence analysis, vulnerability remediation, incident response support, and collaboration with security teams to enhance system

Qualifications

• Bachelor's degree or higher in a related field.
• 5-7+ years of progressive cybersecurity experience with 3+ years in threat/vulnerability management or related areas.
• Industry certifications such as CySA+, CISSP, CISM or equivalent appreciated.

Responsibilities

• Provide support to technical and non-technical teams on security findings.
• Collect, analyze threat intelligence reports and elevate risk.
• Draft reports with assessment findings and recommended improvements.
• Perform vulnerability scans, assess risk, and drive remediation end-to-end.
• Monitor emerging threats and vulnerabilities for the university's program.
• Develop procedures to monitor vulnerabilities using advisories and vendor reports.

Skills

Threat intelligence

Vulnerability management

Incident response

Digital forensics

Malware analysis

Threat hunting

Education

Bachelor's degree in Computer Science, Mathematics, Statistics, or equivalent

Master's degree is highly desirable

Tools

Qualys

Tenable

Rapid7

Job description

The University of Miami Health System ("UHealth") IT Department seeks an IT Security Specialist II to join the Miami team in a full-time capacity. The role focuses on end-user and technical security training, awareness, and supporting PCI-DSS compliance, auditing, risk management, and security assessments under the CISO office.

Responsibilities include threat intelligence analysis, vulnerability remediation, incident response support, and collaboration with security teams to enhance system