Programmer Analyst Info Security

Stony Brook University•Town of Brookhaven, NY

About The Position

At Stony Brook Medicine the Program Analyst Information Security is an entry-level position responsible for supporting the organization's information security program. This role assists with monitoring security events, responding to incidents, reviewing potential security risks, supporting compliance efforts, promoting security awareness, and helping protect the confidentiality, integrity, and availability of organizational data and systems. The ideal candidate is eager to learn, possesses strong problem-solving skills, and has an interest in cybersecurity, technology, and risk management.

Requirements

Associate degree in Cybersecurity, Information Technology, Computer Science, or a related field
2 years of experience in Information Security or an IT related field
Basic understanding of information security principles and best practices.
Familiarity with Microsoft Windows, Microsoft 365, networking concepts, and common security technologies.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Ability to manage multiple priorities and work independently as well as part of a team.

Nice To Haves

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
Familiarity with Microsoft Defender, Entra ID (Azure AD), or similar security platforms.
Exposure to security frameworks such as NIST, CIS Controls, HIPAA, or ISO 27001.
Industry certifications such as Security+ or Network+

Responsibilities

Monitor and triage security alerts from various security tools and platforms.
Assist with investigating suspicious activity, phishing reports, and potential security incidents.
Support user account security reviews, access management, and identity protection efforts.
Assist with vulnerability management activities, including tracking remediation efforts.
Review and document security events, incidents, and operational procedures.
Support compliance initiatives, audits, and security assessments.
Help maintain security documentation, standards, and procedures.
Assist with security awareness and training activities for employees.
Research emerging threats, vulnerabilities, and cybersecurity best practices.
Work closely with Information Technology and business teams to address security concerns.
Participate in security projects and other duties as assigned.
Understanding cybersecurity threats including phishing, malware, ransomware, and social engineering.
Ability to analyze information and identify potential security concerns.
Strong attention to detail and documentation skills.
Customer-service mindset with the ability to interact professionally with staff at all levels.
Commitment to maintain confidentiality and handling sensitive information appropriately.