Security Operations Analyst - Hybrid Incident Response

University of Vermont; New Jersey; Hybrid; USD 65,000 - 75,000; Full time

Job summary

University of Vermont seeks a Security Operations Analyst to analyze security telemetry from EDR/IDPS, detect threats, and coordinate incident response with CSIRT. You'll work with ETS to monitor data flow, refine alerts, and automate where possible, while enforcing access controls and handling policy violations with discretion.

The role supports the Information Security Office and requires strong communication, multi-tasking, and a security-focused mindset.

Qualifications

• Bachelor’s degree in cyber/information security or related field or equivalent experience.
• InfoSec certification or ability to acquire within one year.
• 1–2 years’ direct information security analysis experience.
• Understanding of technical concepts underpinning internet-connected enterprise services.
• Strong written communication producing procedural documentation and comprehensive activity and incident reports.
• Effective customer service, communication, and interpersonal skills.
• Ability to instruct or guide clients at all levels in basic account operations and applications.
• Effective organizational skills with multitasking and case support.
• Demonstrated judgment and accuracy in routine and exceptional situations.
• Proficiency with productivity apps and command line interfaces in Windows, macOS, or Linux.

Responsibilities

• Conduct in-depth analyses of security data from EDR, IDPS and telemetry to identify threats.
• Act on analyses to detect, investigate and respond to security incidents.
• Participate in CSIRT, contributing to threat intelligence, investigations and response strategies.
• Collaborate with ETS to monitor data flow for anomalies and possible exfiltration.
• Refine alerting rules and tune detection models; leverage automation where applicable.
• Support Identity and Account Management by enforcing access control policies.
• Investigate policy violations and address security threats while maintaining confidentiality.

Skills

Communication

Interpersonal skills

Written communication

Customer service

Instruct clients

Organizational skills

Judgment

CLI proficiency

Education

Bachelor’s degree in cyber/information security or related field

Information security certification

Tools

Windows CLI

macOS CLI

Linux CLI

Job description

University of Vermont seeks a Security Operations Analyst to analyze security telemetry from EDR/IDPS, detect threats, and coordinate incident response with CSIRT. You'll work with ETS to monitor data flow, refine alerts, and automate where possible, while enforcing access controls and handling policy violations with discretion.

The role supports the Information Security Office and requires strong communication, multi-tasking, and a security-focused mindset.