Senior Information Security Engineer: DLP & SIEM (Hybrid)

The University of Alabama; Tuscaloosa (AL); Hybrid; USD 67,000 - 82,000; Full time

Job summary

The University of Alabama is seeking an Information Security Engineer III to help run the university's information security program. You will operate and tune enterprise security tools with a focus on data loss prevention across email, endpoint, and web to protect institutional data from unauthorized access or exposure.

You will collaborate with security operations, IAM, infrastructure, and compliance teams while guiding security analysts and less senior engineers in resolving alerts and

Qualifications

• Master's degree with 2+ years IT security engineering experience or Bachelor's with 4+ years in IT security.
• Advanced certifications such as CISSP plus GCIH/GCIA on hire or within 6 months.
• Experience with DLP, endpoint protection, email security, SIEM and vulnerability management.

Responsibilities

• Administer, maintain, and improve security tools, including DLP across email, endpoints and web.
• Operate high-complexity security infrastructure and monitor for issues.
• Back up triage of alerts, tickets, and incidents, guiding analysts to resolution.
• Conduct risk assessments, security compliance reviews, and vulnerability assessments.
• Initiate changes to security technology, processes, and policies; complete annual security training.

Skills

Data security

Incident response

Regulatory compliance

Education

Master's degree in IT security or related field

Bachelor's degree in IT or related field

Tools

DLP software

SIEM

Vulnerability management tools

Microsoft 365 security tools

Job description

The University of Alabama is seeking an Information Security Engineer III to help run the university's information security program. You will operate and tune enterprise security tools with a focus on data loss prevention across email, endpoint, and web to protect institutional data from unauthorized access or exposure.

You will collaborate with security operations, IAM, infrastructure, and compliance teams while guiding security analysts and less senior engineers in resolving alerts and