Security Operations Analyst: Automation & Threat Response

Santa Clara University; Santa Clara (CA); On-site; USD 92,000 - 115,000; Full time

Job summary

Santa Clara University is seeking a Security Operations Analyst to support and enhance security capabilities through scripting, automation maintenance, data integration, and security tools. The role involves testing and maintaining automated security workflows, initial event triage, incident support, and contributing to security assessments within a collaborative university setting.

The position reports to the Chief Information Security Officer and is part of the Information Security Office,

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or Information Systems is required.
• 5+ years of related technical experience in software development, IT operations, or information security operations or similar is preferred.
• Security or automation-focused certifications are preferred (e.g., Security+, GSEC).

Responsibilities

• Develop, test, and maintain API integrations and webhooks for data ingestion and security data feeds.
• Test, script, and maintain security playbooks and workflows in SOAR platforms.
• Build and maintain automated workflows and integrations for investigations.
• Evaluate emerging automation and AI-assisted tools to improve alert triage and efficiency.
• Review automated results for accuracy and reliability for the security team.
• Monitor security event queues, investigate anomalies, and assist with incidents.

Skills

Python scripting

Shell scripting

RESTful APIs

Security concepts

Analytical thinking

Team collaboration

Automation tooling

Data integration

Education

Bachelor's degree in CS/Engineering/Cybersecurity/Information Systems

Tools

Git

Job description

Santa Clara University is seeking a Security Operations Analyst to support and enhance security capabilities through scripting, automation maintenance, data integration, and security tools. The role involves testing and maintaining automated security workflows, initial event triage, incident support, and contributing to security assessments within a collaborative university setting.

The position reports to the Chief Information Security Officer and is part of the Information Security Office,