Security Operations Analyst — Hybrid, Threat Detection

University of Vermont; Burlington (VT); Hybrid; USD 65,000 - 75,000; Full time

Benefits offered by this job

Hybrid schedule

Background check

Job summary

The University of Vermont is seeking a Security Operations Analyst to analyze security data from EDR, IDPS, and other telemetry sources to detect and mitigate threats within the university's digital environment.

The role participates in CSIRT activities, collaborates with ETS teams to monitor data flow, and supports identity and access management by enforcing security policies. Hybrid work schedule available, with a focus on proactive defense and continuous improvement.

Qualifications

• Bachelor’s degree in cyber/information security or related field or equivalent experience.
• One to two years’ direct experience in information security analysis.
• Ability to communicate effectively in writing, producing high-quality procedural documentation and comprehensive activity and incident reports.

Responsibilities

• Analyze operational security data from EDR, IDPS, and other telemetry sources to identify and mitigate threats.
• Participate in CSIRT and contribute to real-time threat intelligence and response strategies.
• Support Identity and Account Management by maintaining secure digital identities and enforcing access control policies.
• Maintain operational readiness by staying informed of emerging threats and refining alerting rules and detection models.

Skills

Communication

Documentation

Multitasking

Customer service

Threat analysis

Written reports

Interpersonal skills

Education

Bachelor’s degree in cyber/information security or related field

Equivalent experience

Tools

SIEM

Threat intelligence platforms

Job description

The University of Vermont is seeking a Security Operations Analyst to analyze security data from EDR, IDPS, and other telemetry sources to detect and mitigate threats within the university's digital environment.

The role participates in CSIRT activities, collaborates with ETS teams to monitor data flow, and supports identity and access management by enforcing security policies. Hybrid work schedule available, with a focus on proactive defense and continuous improvement.