Senior Security Analyst

Troy University; Troy (MI); On-site; USD 90,000 - 120,000; Full time

Job summary

Troy University is seeking a Senior Security Analyst to lead multiple information security disciplines, including incident response, vulnerability management, IDS/IPS, threat hunting, and security operations across the university and business units.

This role oversees incident response activities, risk assessments, vulnerability management, policy development, awareness training, and reporting to management.

Qualifications

• Bachelor’s degree in a related field
• Minimum of five years of related IT experience
• Demonstrated technical expertise in multiple information security domains
• OR an equivalent combination of education, training and experience
• Excellent team participation skills
• Good written and verbal communication skills

Responsibilities

• Responsible for incident response, vulnerability management, IDS/IPS, threat hunting, security operations, policy development, and awareness/education across University and business units.
• Oversee information security incident response activities, risk assessment and risk management, and vulnerability assessment and vulnerability management activities.
• Draft and review information security policies, processes, and procedures; provide guidance on security requirements; maintain automated tools and methodologies in support of Information Security functions.
• Publish regular status reports and communicate recommendations to management; represent Information Security to other organizations on security matters.

Skills

Team collaboration

Communication skills

Security domains expertise

Education

Bachelor’s degree in a related field

Equivalent education/experience

Job description

The Senior Security Analyst position is responsible for technical and thought-leadership duties for multiple information security disciplines such as incident response, vulnerability management, intrusion detection and prevention, threat hunting, security operations, security policy, and awareness/education; oversight of information security incident response activities, risk assessment and risk management activities, and vulnerability assessment and vulnerability management activities spanning University and business units; managing detailed network, operating system, database, and application vulnerability assessments and security configuration audits; managing information security initiatives; oversight of operational tasks supporting information security functions such as intrusion detection and prevention, security event log analysis, management reporting, malware prevention and remediation, encryption, network segmentation, remote access, cloud security, and authentication; supporting, maintaining, monitoring, troubleshooting and enhancing security infrastructure tools, methodologies, software, and hardware; drafting and reviewing information security policies, processes, and procedures; reviewing information security awareness and education materials and other documentation; determining and documenting information security requirements and controls necessary for the protection of information resources; providing guidance and assistance regarding information security matters such as the interpretation of information security policies and requirements or their applicability to particular situations; independently maintaining automated tools and methodologies in support of Information Security functions; analyzing data from Information Security functions and providing reports and recommended response actions to Information Security management; representing Information Security to other organizations on information security related matters, as assigned; publishing regular status reports and submission to management; and performing other related tasks as assigned.

Minimum Qualifications

• 1. Bachelor’s degree in a related field
• 2. Minimum of five years of related IT experience
• 3. Demonstrated technical expertise in multiple information security domains
• 4. OR an equivalent combination of education, training and experience
• 5. Excellent team participation skills
• 6. Good written and verbal communication skills

Preferred Qualifications

• 1. Knowledge of information security technologies, methodologies, and best practices in the domains of: security incident response, vulnerability assessment and management, intrusion detection and prevention, system administration (Windows, OS X, Linux, etc.), security administration of networks, operating systems, databases and applications, access control, encryption, firewalls and proxies, networking, security event log analysis, malware prevention and remediation, cloud technologies, programming/scripting, and risk assessment and management
• 2. Security certifications (e.g. SANS / GIAC , CISSP , CISA , CISM ).

Will this position require driving (personal vehicle, university vehicle, utility vehicle, or golf cart) in order to perform the job duties?

Will this position require driving (personal vehicle, university vehicle, utility vehicle, or golf cart) in order to perform the job duties? No

Work Hours

• Monday through Friday
• 8:00am-5:00pm
• Additional hours as needed for various security updates and projects

List any hazardous conditions or physical demands required by this position

NA

Does this position have supervisory responsibility?

Last Day a Reference Provider Can Submit Reference

Qualified applications will be made available to the department/committee for review immediately upon submission. We ask that you provide email addresses for your reference providers and please be certain that the email addresses you list are accurate. If you are selected as a candidate for consideration by the department/committee, an instructional email will be sent to your reference providers to ask that they submit a reference letter on your behalf via a link to our reference portal. Separate reference letters will be requested for each position to which you apply (if applicable), so your reference providers will be contacted separately for each application on which you list them. Reference letters will not be copied from one application to another. You can assure your reference providers that our system is secure and that all letters are confidential. If your reference providers have trouble using the reference portal, please advise them to contact [e-mail].

Supplemental Questions

Required fields are indicated with an asterisk (*).

• * How did you hear about this employment opportunity?
  • Troy University employment website (www.troyuniversityjobs.com)
  • Chronicle of Higher Education
  • Higher Ed Jobs
  • Social Media website
  • Indeed
  • Other employment website (please specify below)
  • Employee Referral (please specify below)
  • Local newspaper (please specify below)
  • Professional journal (please specify below)
  • Other source (please specify below)
• Please specify:

  (Open Ended Question)

• * Regarding your current employment status, please select one of the following:
  • Not a current Troy University employee
  • Current part-time Troy employee (including adjunct faculty)
  • Current full-time Troy employee - initial appraisal period complete
  • Current full-time Troy employee - still within initial appraisal period (six months for new employees and three months for promoted employees)
• * Do you have a Bachelor's degree in a related field AND a minimum of five years of related IT experience, OR an equivalent combination of education and experience?
  • Yes
  • No

Required Documents

• Resume
• Cover Letter
• List of References

Optional Documents

• Letter of Reference 1
• Letter of Reference 2
• Other Document
• Unofficial Transcript 1
• Unofficial Transcript 2

- Employment is contingent upon a satisfactory background check.
- Troy University is an Equal Employment Opportunity and Affimative Action employer.
- Troy University participates in eVerify.