Senior Information Security Engineer III - Hybrid

The University of Alabama; Tuscaloosa (AL); Hybrid; USD 75,000 - 101,000; Full time

Job summary

The University of Alabama's Information Security Engineering team seeks an Information Security Engineer III to oversee the university's security program. You will monitor tools, manage incidents, conduct risk assessments, and guide analysts in incident resolution, with emphasis on protecting computing assets from unauthorized access.

Work includes maintaining security infrastructure, applying policy changes, researching regulatory requirements, and coordinating with teams to implement

Qualifications

• Master's degree and two (2) years of IT security engineering experience; OR bachelor's degree and four (4) years of IT security engineering experience; OR associate's degree and six (6) years of IT experience to include four (4) years of IT security engineering.
• Must be able to obtain and maintain security clearance. U.S. Citizenship or U.S. Permanent Resident required. DoD 8570 IAM Level III/IAT Level III certifications.

Responsibilities

• Oversee and improve the university's information security program and infrastructure.
• Monitor security tools and respond to incidents and alerts.
• Conduct risk assessments, vulnerability assessments, and regulatory compliance reviews.
• Research evolving regulations and threat information to inform policy updates.
• Guide Security Analysts in incident resolution and remediation.

Skills

Security concepts

Troubleshooting

Networking basics

Communication

Education

Master's degree

Bachelor's degree

Associate's degree

High school diploma

Tools

PowerShell

Python

Azure Government

Cloud platforms

Job description

The University of Alabama's Information Security Engineering team seeks an Information Security Engineer III to oversee the university's security program. You will monitor tools, manage incidents, conduct risk assessments, and guide analysts in incident resolution, with emphasis on protecting computing assets from unauthorized access.

Work includes maintaining security infrastructure, applying policy changes, researching regulatory requirements, and coordinating with teams to implement