IT Statewide Infosec Associate Analyst 1, 2

Cybersecurity Jobs; Baton Rouge (LA); On-site; USD 55,000 - 75,000; Full time

Job summary

Nunez Community College's Office of Technology Services seeks an associate analyst to monitor and respond to cyber threats across the enterprise in an onsite Baton Rouge setting. You will support centralized security alert triage, incident response coordination, and technical support across systems and networks.

Responsibilities include investigating real-time alerts, coordinating remediation with CrowdStrike Falcon Complete, and maintaining incident documentation and SOPs for enterprise proxy

Qualifications

• Two years of information technology experience or six years in any field.
• An associate’s degree in information technology or a bachelor’s degree.
• Certifications in approved areas may substitute for education/experience.

Responsibilities

• Monitor, triage, and investigate real-time security alerts.
• Validate high-priority threats and contain incidents per playbooks.
• Coordinate remediation with CrowdStrike Falcon Complete team.
• Document findings and maintain centralized incident logs.
• Tune detection logic and automated responses to reduce false positives.
• Manage ServiceNow ticket queue for proxy and access issues.
• Troubleshoot SSL/TLS decryption and SWG issues for users.
• Correlate logs to reconstruct attack timelines and assess impact.
• Escalate intrusions to senior incident response personnel.

Skills

Security monitoring

Incident response

Threat hunting

Education

Two years IT experience

Associate degree in information technology

Bachelor’s degree

Six years full-time experience in any field

Tools

Palo Alto Cortex XSIAM

CrowdStrike Falcon Complete

ServiceNow

SSL/TLS

SWG

IoCs

TTPs

OAuth

Job description

At Nunez Community College, the Office of Technology Services (OTS) Information Security Team needs an associate analyst to help monitor and respond to cyber threats across the enterprise. In this onsite role in Baton Rouge, you will support centralized security alert triage, help coordinate incident response activities, and provide technical support across computer systems, applications, and networks.

What you’ll do

• Monitor, triage, and investigate real-time security alerts generated through Palo Alto Networks Cortex XSIAM and CrowdStrike Falcon Complete.
• Validate high-priority threat notifications, evaluate context, and perform initial containment actions aligned to enterprise incident response playbooks.
• Coordinate remediation workflows with the CrowdStrike Falcon Complete managed service team and relevant OTS technical verticals.
• Document investigation findings, root cause analyses, and response actions in the centralized security incident log.
• Assist in tuning detection logic, correlation rules, and automated response playbooks within Cortex XSIAM to reduce false positives.
• Monitor and manage the ServiceNow ticketing queue for proxy-related issues, access requests, and categorized URL reclassification tickets.
• Troubleshoot and resolve web filtering issues, SSL/TLS decryption exceptions, and SWG (secure web gateway) connection anomalies for enterprise users.
• Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or potential evasion attempts.
• Maintain operational documentation and standard operating procedures (SOPs) for enterprise proxy management and ticket workflows.
• Investigate suspicious internal and perimeter network activity, protocol anomalies, and anomalous host behavior using network telemetry and log sources.
• Conduct proactive threat hunting using threat intelligence indicators (IoCs) and behavioral analytics to identify potential adversary activity (TTPs).
• Correlate disparate log sources (firewall, DNS, VPN, authentication, and endpoint logs) to reconstruct attack timelines and assess scope of impact.
• Escalate confirmed intrusions or advanced persistent threats (APTs) to senior incident response personnel and OTS leadership.
• Monitor identity provider signals and behavioral analytics for indicators of compromised credentials, impossible travel, and unauthorized account modifications.
• Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
• Verify post-compromise cleanup actions, ensuring persistent access mechanisms (including malicious inbox forwarding rules and unauthorized OAuth applications) are identified and removed.
• Advise agency points of contact and help desk personnel on best practices for user remediation and credential hygiene.
• Perform other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.

Required experience and education

• Two years of experience in information technology; OR
• Six years of full-time work experience in any field; OR
• An associate’s degree in information technology; OR
• A bachelor’s degree.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

Additional minimum qualification rules: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience toward the six years of full-time work experience requirement in any field. The maximum substitution allowed is 120 semester hours, substituting for a maximum of four years of experience. The note about approved certifications and a Certificate of Eligibles also applies for hiring or promotion.

Technologies you’ll work with

• Palo Alto Networks Cortex XSIAM
• CrowdStrike Falcon Complete
• ServiceNow
• SSL/TLS
• Secure web gateway (SWG)
• IoCs
• TTPs
• OAuth

Role details

• Appointment type: Filled by new hire or by promotion of a current permanent status classified employee.
• Career progression: Participates in a career progression group and may be filled from this recruitment as an IT Infosec Associate Analyst 1 or 2.

Background checks and eligibility

• Prior to a new hire, a background check including criminal record history will be conducted.
• Prospective employees may be subject to pre-employment drug testing.
• New hires will be subject to employment eligibility verification via the federal government’s E-Verify system.

The official job specifications for this role, as defined by the State Civil Service, can be found via the job specification link provided with the posting.