Associate IT Security Analyst

University of Arkansas • Fayetteville, AR

2d • Onsite

About The Position

The Associate IT Security Analyst is responsible for planning, coordinating, and implementing security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information. This position analyzes and assesses vulnerabilities in the infrastructure (software, hardware, networks); investigates tools to identify and detect vulnerabilities and recommends solutions; analyzes and assesses damage to the infrastructure as a result of security incidents, examines available tools and processes for remediation; tests for compliance with security policies and procedures. Regular, reliable, and non-disruptive attendance is an essential job duty, as is the ability to create and maintain collegial, harmonious working relationships with others.

Requirements

• Bachelor’s degree in a related field from an accredited institution of higher education.
• At least four years of experience in Information Technology.
• At least two years of experience in information security, Incident response, SOC, Cloud, or equivalent.
• At least one year of hands-on experience with SIEM tools (Sentinel, Splunk or equivalent) and log analysis.
• Knowledge of information protection methodologies and concepts.
• Understanding of security threats and attack vectors.
• Familiarity with security best practices, such as secure coding practices, network segmentation, and access control.
• Basic knowledge of networking principles, such as TCP/IP, routing, and switching.
• Strong analytical and problem-solving skills.
• Strong desire to learn or improve cyber security skills.
• Excellent communication and interpersonal skills.
• Ability to work collaboratively with both technical and non-technical stakeholders.
• Ability to work with sensitive information and maintain the confidentiality of such data and information.
• Ability to identify potential security breaches and recommend countermeasures.
• Ability to identify and analyze security events.
• Ability to think critically and creatively.
• Proof of legal authority to work in the United States on the first day of employment.

Nice To Haves

• Current CEH, CCNA-Security, Security+, Cloud+, GSEC, or similar certifications compatible with ISO 17024 or US DoD 8570.01.
• Experience with Azure Security.
• Experience with assessing application and / or system risk.
• Experience dealing with Phishing or Spear Phishing attacks.
• Experience with penetration testing or Read teaming.
• Experience in the execution and management of Information System’s (IS) incident response and administrative inquiries/investigations in collaboration with the Investigations department.
• Experience with at least one programming, scripting language, or SQL.
• Experience with technical concepts like regular expressions, data normalization, and correlation.

Responsibilities

• Planning, coordinating, and implementing security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction, or disclosure of information.
• Analyzing and assessing vulnerabilities in the infrastructure (software, hardware, networks).
• Investigating tools to identify and detect vulnerabilities and recommending solutions.
• Analyzing and assessing damage to the infrastructure as a result of security incidents.
• Examining available tools and processes for remediation.
• Testing for compliance with security policies and procedures.

Benefits

• University contributions to health insurance.
• University contributions to dental insurance.
• University contributions to life insurance.
• University contributions to disability insurance.
• Tuition waivers for employees and their families.
• 12 official holidays.
• Immediate leave accrual.
• Choice of retirement programs with university contributions ranging from 5 to 10% of employee salary.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level