Information Security Analyst

Santa Clara University•Santa Clara, CA

10d•$102,800 - $128,560•Hybrid

About The Position

The Information Security Analyst is a hands-on security generalist who strengthens university-wide cybersecurity through process automation, technical risk reviews, security posture monitoring, and multi-platform incident response. The role is part of the Information Security Office and works with technical teams, risk management, legal, university departments, and external vendors and partners to protect information, support regulatory compliance, and improve security practices. The position works under general supervision and in close collaboration with senior analysts, engineers, and the Chief Information Security Officer (CISO). It is not eligible for fully remote work and requires on-site work in Santa Clara, California, on a weekly basis. The Information Security Office works with the university community to secure system and network resources and protect the confidentiality of student, faculty, and staff information. The position supports the mission and goals of the University and Information Services and requires a commitment to excellent customer service.

Requirements

Bachelor’s degree from an accredited institution; a degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline is preferred.
At least 6 years of related technical experience in software development, IT operations, information security operations, or a similar field.
Demonstrated experience building programmatic scripts, connecting through APIs, and automating technical workflows.
Proficiency in Python or shell scripting, such as Bash, for basic data manipulation, log parsing, or automating repetitive tasks.
Hands-on experience with RESTful APIs, webhooks, and standard data exchange formats such as JSON and XML.
Familiarity with applying CIS Benchmarks or similar security baselines to evaluate system configurations.
Practical experience with PowerShell and inspecting Active Directory and Group Policy Objects.
Familiarity with core security concepts, including common network protocols, operating-system security internals, and log analysis across Windows, Linux, and macOS.
Basic understanding of compliance and privacy standards relevant to a university setting, such as FERPA and GLBA.
Knowledge of information technology, infrastructure trends, and information security concepts, and ability to continually develop technical knowledge and skills.
Ability to work collaboratively, meet deadlines, manage multiple tasks and priorities, and respond effectively to operational security issues.
Ability to exercise independent judgment, think critically, solve complex problems, and maintain confidentiality when handling sensitive information.
Ability to explain technical, risk, and automated security concepts to non-experts and diverse audiences.
Excellent customer-service skills and ability to establish cooperative working relationships in a diverse multicultural environment.
High self-motivation, a bias for action, commitment to continuous improvement, and impeccable integrity.
Appreciation for the University’s mission, vision, values, priorities, procedures, and policies.

Nice To Haves

Security- or automation-focused certifications, such as CISSP, CISA, Security+, GSEC, or certified Python or cloud practitioner credentials.
Experience working in higher education or a highly regulated data environment.

Responsibilities

Respond to security requests assigned to the Information Security Office within defined service-level agreements, handle routine exception requests, and identify opportunities to improve and document standard operating procedures.
Explain technical security concepts as practical, clear, and actionable behavioral guidance for non-technical stakeholders.
Conduct lightweight risk assessments with faculty and staff concerning departmental workflows, software use, and data handling practices.
Design, write, and maintain Python, PowerShell, shell scripts, and AI tools to automate operational tasks and streamline security workflows, in collaboration with senior team members.
Assist in developing, testing, and maintaining RESTful API integrations and webhooks connecting security and infrastructure platforms.
Assist with technical investigation and containment of security incidents under senior leadership guidance.
Review SIEM and automated-tool findings, analyze incomplete telemetry, and determine appropriate investigation steps.
Triage alerts and vulnerability reports, assess risk, contact system owners, and track remediation.
Prepare incident reports documenting timelines, impacts, technical findings, and remediation steps.
Partner with IT engineers and system owners on third-party service deployments to ensure baseline security controls and data protection practices are applied before launch.
Evaluate technical configurations, data flows, and infrastructure deployments for compliance with standards such as FERPA, HIPAA, GLBA, and PCI.
Conduct routine security evaluations and scans across university systems and identity environments to identify hygiene issues, unnecessary privileges, and configuration weaknesses, and partner with technical teams on remediation.
Recommend and implement initiatives that improve service quality and processes; identify problems, determine causes, and present recommendations.
Maintain customer contact and solicit feedback to improve services; build collaborative relationships across academic and administrative departments.
Research workflow resources, use appropriate tools to maximize productivity, and develop guidelines supporting unit functions.
Prepare progress reports, technical metrics, routine incident reports, and other requested reports; inform the supervisor of project status and deviations from goals.
Ensure operational functions are complete, accurate, and timely, and consult senior security leadership on complex architectural decisions, policy exceptions, and high-severity incidents.