Security Operations Analyst

Santa Clara University•Santa Clara, CA

2d•Hybrid

About The Position

The Security Operations Analyst is focused on supporting and enhancing security capabilities across the university through software scripting, automation maintenance, data integration, and the utilization of security tools. Working under the general guidance of senior team members, this position helps test, implement, and maintain automated security operations and workflows. Secondary duties include initial monitoring and triage of security events, supporting incident response, and assisting with security assessments. This role is designed for a technically curious individual looking to build foundational security engineering and operational experience within a collaborative higher education environment. The Security Operations Analyst reports to the Chief Information Security Officer and is a member of the Information Security Office. This office works with the university community to secure system and network resources, protect the confidentiality of student, faculty, and staff information, and raise cybersecurity awareness. In conjunction with technical teams, risk management, legal, and other university and external vendors and partners, the Information Security Office works to ensure regulatory compliance, best practices, and secure information handling. The activities of this position must support the Mission and Goals of the University and Information Services. Demonstrated experience with and a commitment to delivering excellent customer service is required.

Requirements

General Knowledge of information technology, infrastructure trends, and information security concepts, with the ability to continually develop new technical knowledge and skills.
Ability to work in a collaborative environment, as either a member or leader of a project team, to meet deadlines and achieve goals.
Ability to interact with a diverse workforce to provide excellent customer service.
Self-motivated, showing initiative and a passion for continuous improvement.
Ability to successfully keep track of and manage multiple tasks and project assignments simultaneously.
Ability to exercise independent judgment and engage in critical thinking and complex problem solving.
Ability to manage multiple priorities and respond effectively to operational security issues in a dynamic technical environment.
Ability to explain technical, risk, and automated security concepts to non-experts and diverse audiences.
Ability to maintain confidentiality and securely manage confidential information.
Must possess impeccable integrity, executing responsibilities while maintaining the trust and confidence of senior management.
Appreciation for the University’s mission, vision, values, priorities, procedures, and policies.
Proficiency in Python or shell scripting (e.g., Bash) for basic data manipulation, log parsing, or automating repetitive tasks.
Basic understanding of RESTful APIs, webhooks, and standard data exchange formats like JSON or XML.
Familiarity with core security concepts (e.g., common network protocols, operating system security internals, and log analysis).
Familiarity with software engineering fundamentals (such as version control tools like Git).
Basic understanding of common compliance and privacy standards relevant to a university setting (e.g., FERPA, GLBA).
Bachelor’s degree from an accredited institution of higher education required in Computer Science, Engineering, Cybersecurity, or Information Systems.
5+ years of related technical experience in software development, IT operations, or information security operations or similar.
Demonstrated experience building programmatic scripts, connecting via APIs, and automating technical workflows.

Nice To Haves

Security or automation-focused certifications preferred (e.g., Security+, GSEC, or certified Python/Cloud practitioner credentials).
Experience working within a Higher Education or highly regulated data environment is preferred.

Responsibilities

Assist in the development, testing, and routine maintenance of API integrations and webhooks that connect internal asset inventories and security data feeds.
Support the testing, scripting, and continuous maintenance of established security playbooks and workflows within security orchestration and automation platforms to streamline alert response times.
Help build and maintain automated workflows and integrations that provide security personnel with relevant documentation, procedures, and operational context during investigations.
Test and evaluate emerging automation and AI-assisted productivity tools under guidance to help improve alert triage and operational efficiency.
Review and validate automated or AI-assisted analysis results to ensure accuracy and reliable data outputs for the security team.
Maintain and optimize basic Python and shell scripts used to automate the initial gathering of context and enrichment data for incoming security events.
Participate in cybersecurity intelligence-sharing communities to monitor external threat data and help cross-reference newly identified Indicators of Compromise (IOCs) against internal systems.
Monitor security event queues, investigate anomalies, and serve as an operational contributor during security incidents under the direction of senior security personnel.
Assist senior analysts in reviewing system configurations, data flows, and software deployments to verify alignment with university security standards and compliance guidelines.
Help translate manual workflows into structured, reproducible scripts and maintain clear, up-to-date technical documentation.
Actively encourage information security best practices and contribute to campus cybersecurity awareness efforts.
Perform other security-related duties and technical support tasks as assigned.