Security Operations Analyst

University of Vermont; Burlington (VT); Hybrid; USD 65,000 - 75,000; Full time

Benefits offered by this job

Hybrid schedule

Background check

Job summary

The University of Vermont is seeking a Security Operations Analyst to analyze security data from EDR, IDPS, and other telemetry sources to detect and mitigate threats within the university's digital environment.

The role participates in CSIRT activities, collaborates with ETS teams to monitor data flow, and supports identity and access management by enforcing security policies. Hybrid work schedule available, with a focus on proactive defense and continuous improvement.

Qualifications

• Bachelor’s degree in cyber/information security or related field or equivalent experience.
• One to two years’ direct experience in information security analysis.
• Ability to communicate effectively in writing, producing high-quality procedural documentation and comprehensive activity and incident reports.

Responsibilities

• Analyze operational security data from EDR, IDPS, and other telemetry sources to identify and mitigate threats.
• Participate in CSIRT and contribute to real-time threat intelligence and response strategies.
• Support Identity and Account Management by maintaining secure digital identities and enforcing access control policies.
• Maintain operational readiness by staying informed of emerging threats and refining alerting rules and detection models.

Skills

Communication

Documentation

Multitasking

Customer service

Threat analysis

Written reports

Interpersonal skills

Education

Bachelor’s degree in cyber/information security or related field

Equivalent experience

Tools

SIEM

Threat intelligence platforms

Job description

Security Operations Analyst

The University of Vermont is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category legally protected by federal or state law.

For information on safety and security at the University of Vermont, see the annual security report by clicking on the Clery Act button in the sidebar menu.

Finalists for positions at UVM may be subject to a criminal background check.

For classified staff positions, actual hiring pay dependent on current competitor market conditions, comparable campus peer(s) at time of hire, and candidate’s experience level and length.

Be sure to carefully review and update your application information before submitting an application!

Position Details

Advertising/Posting Title | Security Operations Analyst

Posting Summary | Conduct in-depth analyses of operational security data sourced from Endpoint Detection and Response (EDR), Intrusion Detection and Prevention Systems (IDPS), and other telemetry sources to identify and mitigate threats to the confidentiality, integrity, and availability of information within the University of Vermont’s digital environment. Act on these analyses to proactively detect, investigate, and respond to security incidents, aligning with the Information Security Office’s mission to protect institutional data and assets.

Participate in UVM’s Cybersecurity Incident Response Team (CSIRT), contributing to real-time threat intelligence, forensic investigations, and response strategies. Work closely with ETS colleagues and partners to monitor and analyze data flow for anomalies, unauthorized access attempts, and potential exfiltration of sensitive data. Engage in continuous improvement of security monitoring and response mechanisms by refining alerting rules, tuning detection models, and leveraging automation where applicable.

Support the Identity and Account Management functions of Enterprise Technology Services by maintaining secure digital identities, enforcing access control policies, and addressing account-related security threats. Investigate and act upon policy violations, abuse complaints, and exceptions to automated identity management processes while upholding strict confidentiality and ensuring compliance with institutional security policies.

Exercise discretion and sound judgment in assessing security events. Maintain operational readiness by staying informed of emerging threats, contributing to proactive defense strategies, and continuously enhancing security response capabilities through ethical, repeatable, and defensible methodologies.

ETS consists of five core units: Client Services, Network Services, Information Security Office, Systems Architecture and Administration (SAA), and Database Administration/Enterprise Application Services. Within this structure, the Information Security Office (ISO) is responsible for daily activities to monitor, document and remediate incidents and risks to the University.

Minimum Qualifications (or equivalent combination of education and experience)

Bachelor’s degree in cyber/information security or related field or equivalent experience. Recognized information security certification (or ability to acquire within one year). One to two years’ direct experience in information security analysis. Understanding of technical concepts underpinning internet-connected enterprise services. Ability to communicate effectively in writing, producing high-quality procedural documentation and comprehensive activity and incident reports that enable accurate self-assessment, audit readiness, and continuous improvement within the Information Security Office. Effective customer service, communication, and interpersonal skills. Ability to instruct or guide clients at all levels of experience in basic account operations, including account management and basic usage of common applications. Effective organizational skills, including ability to manage multiple concurrent tasks and support cases. Demonstrated ability to apply judgment and work with accuracy in routine cases and in exceptional situations. Proficiency with common productivity applications and command line interfaces in Windows, macOS, or Linux.

Desirable Qualifications

Professional experience with cybersecurity incident response, endpoint/network forensics, and/or continuous security monitoring. Ability to produce admissible documentation and maintain evidentiary chain of custody. Experience with cyber threat intelligence platforms. Experience with constituent education/outreach and proficiency presenting via remote instruction tools. Familiarity with securing cloud-based email, file storage, and applications. Experience with enterprise-level security information and event management (SIEM).

Anticipated Pay Range

$65000-$75000

Special Conditions

Occasional evening and/or weekends required (if non-exempt position, may result in overtime). This position is eligible for a hybrid schedule with an option to split time between campus and elsewhere, in accordance with the university telecommuting policy. Background Check required for this position.

FLSA

Exempt

Union Position

No

Posting Details

Position will be posted for a minimum of one week, after which it is subject to removal without notice.

Job Location

Burlington, Vermont, United States

Job Open Date

08/12/2026

Job Close Date

Open Until Filled

No

Our Common Ground Statement

The University of Vermont is a welcoming, educationally purposeful community committed to creating an inclusive environment that embraces intellectual diversity and global perspectives. We seek to prepare students to be accountable leaders who will bring to their work a grasp of complexity, effective problem-solving and communication skills, and an enduring commitment to learning and ethical conduct. Members of the University of Vermont community embrace and advance the values of Our Common Ground: Respect, Integrity, Innovation, Openness, Justice, and Responsibility. Staff play a critical role in this effort and the successful candidate will demonstrate a strong commitment to UVM’s mission and advancing Our Common Ground values through the execution of their job duties.

Position Information

Position Title | Information Security PC2 X

Posting Number | S6257PO

Department | Information Security Office/11670

Position Number | 00027958

Percent of Full-Time | 1.0

Standard Hours at 1.0 FTE | 37.5

Term (months per year) | 12

Required Documents

1. Resume
2. Cover Letter/Letter of Application

©2019 The University of Vermont – Burlington, VT 05405 – [phone]