Senior IT Security Analyst – Systems & SIEM

University of California, Berkeley; Berkeley (CA); On-site; USD 1,021,140 - 1,339,200; Full time

Job summary

University of California, Berkeley is seeking a seasoned IT Security Analyst to join the Security Engineering team within the Information Security Office. You will administer security systems, implement controls, and support broad-scale security initiatives across campus.

The role emphasizes scripting, DevOps automation, and research into security solutions, including SIEM, IDS/IPS, EDR, and vulnerability scanners. Collaboration with campus stakeholders is essential to strengthen defenses.

Qualifications

• Experience reading and interpreting logs from a broad range of applications and services used in enterprise IT, with a focus on security relevant logs.
• Ability to follow and/or learn department processes and procedures.
• Interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various levels in the organization.
• Experience using IT security systems and tools, such as Intrusion Detection Systems, Vulnerability Scanners, Firewalls, Security Information and Event Management systems.
• Advanced knowledge of computer security best practices and policies including demonstrated experience securing server-based software.
• Demonstrated skill at administering complex security controls and configurations to computer hardware, software and networks.
• Knowledge of computer hardware, software and network security issues and approaches.
• Experience with Linux systems, particularly Redhat Enterprise Linux.
• Familiarity with web servers, load balancers, firewalls, and DNS.
• Ability to write technical documentation in a clear and concise manner.
• Understanding of system performance monitoring and actions that can be taken to improve or correct performance.
• General knowledge of other areas of IT.
• Thorough understanding of and experience with systems and security issues and corrective actions.
• Experience automating systems build and provisioning using tools such as Ansible and Terraform.

Responsibilities

• Manages Information Security Office systems, including the installation, configuration, maintenance, and support of systems and software.
• Implements security controls according to best practices to prevent malicious intrusion of systems.
• Researches, evaluates, and implements systems, services, and technology solutions that support Information Security Office systems and services.
• Performs system or device enhancements such as software, hardware, and network configuration, updates and installations for projects or services of moderately complex scope.
• Writes and executes complex scripts in support of systems management, log analysis and other duties for multiple integrated systems.
• Assist in implementing and maintaining various DevOps processes to automate systems provisioning and management.
• Implements complex and broad-scale security controls to prevent and detect unauthorized access or changes to campus hardware, software, and network infrastructure.
• Provides research, analysis and solutions to address attempted efforts to compromise security protocols.
• Advises the campus community on security prevention, best practices and secure software.
• Serves as a subject matter expert, providing analysis and context for security investigations and incidents.
• Triages security incidents and support tickets as part of a periodic analyst rotation; may participate in responding to security events and operational issues.
• Participates in professional development and training activities to maintain expertise in information security, security engineering, and related technologies.

Skills

Log analysis

Scripting

Security monitoring

Incident response

Security policy

Team collaboration

Linux administration

Security tools

Education

Bachelor's degree in related area

Tools

Ansible

Terraform

SIEM

Job description

University of California, Berkeley is seeking a seasoned IT Security Analyst to join the Security Engineering team within the Information Security Office. You will administer security systems, implement controls, and support broad-scale security initiatives across campus.

The role emphasizes scripting, DevOps automation, and research into security solutions, including SIEM, IDS/IPS, EDR, and vulnerability scanners. Collaboration with campus stakeholders is essential to strengthen defenses.