IT Statewide Infosec Analyst

Cybersecurity Jobs; Baton Rouge (LA); On-site; USD 60,000 - 90,000; Full time

Job summary

McNeese State University is seeking an IT Statewide Infosec Analyst to strengthen enterprise security operations from the Office of Technology Services. This onsite Baton Rouge role will monitor real-time cyber threats, coordinate incident response, and support enterprise systems, applications, and networks.

You will work with Cortex XSIAM, CrowdStrike Falcon Complete, and ServiceNow, validating alerts, performing containment steps, and maintaining security logs.

Qualifications

• Four years of experience in information technology OR six years in any field plus two years in information technology
• Associate degree plus two years IT experience, or higher degrees with IT experience
• Certification substitutions allowed for hire
• Experience substitution: 30 semester hours equals one year of experience (max 120 semester hours)

Responsibilities

• Monitor real-time security alerts and investigate incidents
• Coordinate remediation with the CrowdStrike Falcon Complete MSP and OTS teams
• Document findings and root cause analyses in the incident log
• Tune detection logic and playbooks to reduce false positives
• Manage ServiceNow ticket queue for proxy, access, and URL reclassification items
• Troubleshoot SSL/TLS decryption exceptions and SWG connections
• Analyze traffic patterns for policy violations and unauthorized app usage
• Maintain SOPs for enterprise proxy management and ticket workflows
• Investigate suspicious internal and perimeter network activity using logs
• Perform proactive threat hunting using IoCs and TTPs
• Reconstruct attack timelines by correlating diverse logs
• Escalate intrusions to senior incident responders and leadership
• Monitor identity signals for compromised credentials and MFA issues
• Coordinate with Service Desk for account locks and password resets
• Verify post-compromise cleanup and removal of persistence mechanisms
• Provide remediation guidance to agency points of contact and help desks

Skills

Threat detection

Incident response

Security monitoring

Log analysis

Education

Associate degree in information technology

Bachelor's degree in information technology

Master's degree in information technology

Tools

Palo Alto Cortex XSIAM

CrowdStrike Falcon Complete

ServiceNow

SSL/TLS

OAuth

Job description

McNeese State University is seeking an IT Statewide Infosec Analyst to strengthen enterprise security operations through the Office of Technology Services (Information Security Team). In this onsite Baton Rouge role, you will monitor and investigate real-time cyber threats, coordinate incident response activities, and provide technical support across enterprise systems, applications, and networks.

What you'll do

• Monitor, triage, and investigate real-time security alerts from Palo Alto Networks Cortex XSIAM and CrowdStrike Falcon Complete.
• Validate high-priority threat notifications, assess context, and perform initial containment steps aligned with enterprise incident response playbooks.
• Coordinate remediation workflows with the CrowdStrike Falcon Complete managed service team and relevant OTS technical verticals.
• Document findings, root cause analyses, and response actions in the centralized security incident log.
• Assist with tuning detection logic, correlation rules, and automated response playbooks in Cortex XSIAM to reduce false positives.
• Monitor and manage the ServiceNow ticket queue for proxy-related issues, access requests, and URL reclassification items.
• Troubleshoot web filtering and related concerns including SSL/TLS decryption exceptions and secure web gateway (SWG) connection anomalies.
• Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or evasion attempts.
• Maintain operational documentation and SOPs for enterprise proxy management and ticket workflows.
• Investigate suspicious internal and perimeter network traffic, protocol anomalies, and anomalous host behaviors using network telemetry and log sources.
• Perform proactive threat hunting using threat intelligence indicators (IoCs) and behavioral analytics to identify potential adversary activity (TTPs).
• Correlate disparate logs (firewall, DNS, VPN, authentication, and endpoint logs) to reconstruct attack timelines and assess impact scope.
• Escalate confirmed intrusions and APTs to senior incident response personnel and OTS leadership.
• Monitor identity provider signals and behavioral analytics for compromised credentials, impossible travel, and unauthorized account modifications.
• Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
• Verify post-compromise cleanup by identifying and purging persistent access mechanisms such as malicious inbox forwarding rules and unauthorized OAuth applications.
• Advise agency points of contact and help desk personnel on user remediation best practices and credential hygiene.
• Perform other tasks, special projects, analyses, studies, and plans as directed by OTS Leadership.

Requirements

• Four years of experience in information technology; OR
• Six years of full-time work experience in any field plus two years of experience in information technology; OR
• An associate’s degree in information technology plus two years of experience in information technology; OR
• A bachelor’s degree plus two years of experience in information technology; OR
• A bachelor’s degree with twenty-four semester hours in an information technology, computer science, engineering, mathematics, or business analytics field plus one year of experience in information technology; OR
• A master’s degree plus one year of experience in information technology.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

Experience substitution: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience towards the six years of full-time work experience in any field (maximum substitution allowed is 120 semester hours which substitutes for a maximum of four years of experience in any field).

Technology you'll work with

• Palo Alto Networks Cortex XSIAM
• CrowdStrike Falcon Complete
• ServiceNow
• SSL/TLS, Secure web gateway (SWG)
• Firewall, DNS, VPN, authentication, endpoint logs
• IoCs, TTPs, OAuth

Position details

• Appointment Type: Filled by new hire or by promotion of a current permanent status classified employee.
• Career Progression: Part of a career progression group and may be filled as an IT Statewide Infosec Analyst 1 or 2.

For further information, contact Erica R. Gay, HR Specialist, Division of Administration/Office of Human Resources at [e-mail].