Information Security Analyst (Risk and Incident Response)

Butler•Indianapolis, IN

11h•Onsite

About The Position

The Information Security Analyst for Risk and Incident Response provides technical expertise to support Butler University's information security program. This role serves as a primary technical resource for cybersecurity operations, focusing on vulnerability management, incident response, and risk assessment. The Analyst is responsible for the daily administration of security technologies, investigating cybersecurity events, and implementing security controls to protect the university's information assets, technology systems, and business operations. Collaborating with the Information Security Manager, IT teams, and managed security service providers, the Analyst identifies, assesses, and helps remediate cybersecurity risks. The position also partners with technical staff to integrate security best practices into technology services and contributes to the continuous improvement of the university's cybersecurity program. This position requires the successful candidate to reside in the Indianapolis area and work on-site. Sponsorship is not provided.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; or an equivalent combination of education and relevant professional experience.
Three (3) years of progressively responsible experience in information security, cybersecurity operations, systems administration, network administration, or a closely related technical field.
Demonstrated experience investigating security events, responding to cybersecurity incidents, or administering enterprise security technologies.
Experience performing vulnerability management, security assessments, or technical risk analysis in an enterprise environment.
Working knowledge of information security principles, including network security, endpoint security, operating systems, cloud technologies, and common cybersecurity frameworks and best practices.
Experience administering or supporting enterprise security technologies such as endpoint detection and response (EDR/XDR), endpoint privilege management, email security, vulnerability management, SIEM, or related platforms.
Demonstrated analytical, problem-solving, and troubleshooting skills, with the ability to prioritize competing operational demands.
Strong written and verbal communication skills, with the ability to communicate technical concepts to both technical and non-technical audiences.

Nice To Haves

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
Professional cybersecurity certification(s) such as CISSP, GSEC, Security+, CySA+, GCIH, GCIA, or equivalent.
Experience administering Cortex XDR, BeyondTrust Endpoint Privilege Management (EPM), Proofpoint, Palo Alto Networks security products, or comparable enterprise security platforms.
Experience working with managed detection and response (MDR), managed security service providers (MSSPs), or security operations centers (SOCs).
Experience conducting digital forensics, malware analysis, threat hunting, or incident response in a complex enterprise environment.
Experience performing third-party/vendor security assessments and technical risk evaluations.
Experience in higher education, healthcare, government, or another highly regulated environment.
Familiarity with security and compliance frameworks such as NIST Cybersecurity Framework (CSF), CIS Critical Security Controls, ISO 27001, or EDUCAUSE HECVAT.
Experience with scripting or automation using PowerShell, Python, or similar languages to improve security operations.

Responsibilities

Administer and continuously improve Butler University's vulnerability management program, including identification, prioritization, tracking, and remediation of security vulnerabilities.
Serve as the primary technical lead for the investigation, analysis, containment, and recovery of cybersecurity incidents, coordinating response activities with internal stakeholders and external partners as appropriate.
Manage the day-to-day operational relationship with Butler's managed detection and response (MDR) provider, ensuring timely investigation, response, escalation, and resolution of security events and recommended actions.
Administer, maintain, and optimize Butler's security technologies, including endpoint protection (EDR), endpoint privilege management (EPM), email security, data loss prevention (DLP), and other security platforms as assigned.
Monitor the health, effectiveness, and configuration of security tools, ensuring they remain properly configured, updated, and aligned with industry best practices.
Conduct technical security assessments of systems, applications, networks, and cloud services to identify security risks and recommend appropriate mitigation strategies.
Partner with IT infrastructure, applications, and project teams to integrate security requirements and best practices into the design, implementation, and operation of university technology services.
Develop and maintain incident response procedures, technical documentation, operational runbooks, and security standards related to assigned responsibilities.
Analyze emerging threats, vulnerabilities, and security trends, recommending improvements to strengthen Butler University's overall security posture.
Participate in third-party security assessments, technology evaluations, and other risk management activities by providing technical expertise and security recommendations.
Support security awareness, campus outreach, and education initiatives by providing technical guidance, developing content, and assisting with incident communications when appropriate.
Perform additional duties as assigned.

Benefits

20 days of paid time off (vacation and PTO days) per fiscal year
8 paid holidays
Paid Winter Break between Christmas Eve and New Year's Day
Paid Parental Leave (after 1 year of full-time employment)
Comprehensive medical, dental, and vision plans
Disability and life insurance programs
10% employer contribution to retirement after 1 year of full-time employment
Remission of tuition for classes taken at Butler for employees, spouses, and dependent children (Eligibility after 9 months of full-time employment)
Covers tuition only for undergraduate/graduate degrees for employees & spouses, and undergraduate degrees for dependents (under age 26)
Tuition Exchange Program for Dependents at participating institutions
Access to Butler's on-site fitness facility and libraries for full-time staff and faculty
LinkedIn Learning Courses
Free premium subscription to the Calm App
Free subscription to the WSJ, The Economist, and NYT
Discount at the College Bookstore
Discount on select Athletic and Arts/Event Center Performances