Senior Cybersecurity Analyst

Law School Admission Council•Newtown Township, PA

3d•$120,000 - $132,000•Remote

About The Position

The Senior Cybersecurity Analyst protects, monitors, and improves LSAC’s network, Microsoft cloud environment, and intellectual property, including test items, candidate data, and systems data. The role serves as LSAC’s subject-matter expert for Microsoft Azure security, Microsoft Purview, and Data Loss Prevention (DLP), leading the design, implementation, and tuning of controls that discover, classify, and protect sensitive information across Microsoft 365, Azure, and endpoints. The analyst partners with departments across LSAC to promote security awareness and best practices, uses security tools to monitor and respond to threats and incidents, and supports compliance with requirements such as SOC 2, PCI DSS, and financial and IT audits. The position monitors intrusion prevention systems, cloud security alerts, DLP policy matches, and suspicious network traffic; oversees firewalls and website penetration testing; and helps ensure project deliverables follow security guidelines. As a senior team member, the analyst provides technical leadership, mentors colleagues, and advances LSAC’s Security Systems Program. The position has no people-management responsibilities. The role operates in a remote and professional office environment and routinely uses standard office equipment. LSAC’s standard business hours are Monday through Friday, 8:30 a.m. to 4:45 p.m. ET, though the exempt employee is expected to work the hours needed to complete assignments responsibly and professionally. No travel is required. LSAC’s mission is to advance law and justice by promoting access, equity, and fairness in law school admission, broadening pathways into legal education, and supporting law schools, law students, and the legal education community.

Requirements

Bachelor’s degree in Information Systems, Cybersecurity, or a related field.
At least 10 years of IT experience, including more than 5 years in IT security, or an equivalent combination of education, training, and experience.
Demonstrated hands-on experience designing, deploying, and managing Microsoft Purview in an enterprise Microsoft 365 environment, including DLP policies, sensitivity labels, sensitive information types, and Information Protection.
Proven experience running a DLP program end to end, including policy design, phased rollout from simulation to enforcement, alert triage, tuning, and user education.
Strong working knowledge of Microsoft Azure security, including Microsoft Entra ID, Conditional Access, Privileged Identity Management, Azure networking, Key Vault, Azure Policy, and Microsoft Defender for Cloud.
Experience with Microsoft Defender XDR, including Defender for Endpoint, Office 365, and Cloud Apps, and Microsoft Sentinel or a comparable SIEM.
Solid experience establishing and promoting a Security Systems Program and providing guidance to raise security awareness.
Knowledge and experience with network protocols, firewalls, penetration tools, remote access, network and PC operating systems and vulnerabilities, and network management tools.
Experience with security tools and best practices, Windows-based systems, Tenable Nessus, Microsoft Defender, PowerShell scripting, and other technical platforms and administration.
Solid understanding of TCP/IP and application development and security best practices.
Solid knowledge of authentication systems, including modern authentication, multi-factor authentication, token-based authentication, and digital certificates (PKI).
Solid knowledge of encryption, including Microsoft Purview Message Encryption, Azure Key Vault key management, and protection of data at rest and in transit.
Broad working knowledge of security program issues and best practices, including system threat and vulnerability assessments, system security requirements and architectures, and security risk mitigation plans.
Excellent written and verbal communication skills.
Strong accountability, time management, prioritization, attention to detail, and organizational skills.
Ability to provide technical leadership and consultation, mentor team members, and apply project management skills to lead security initiatives from planning through implementation.
Ability to enhance, comply with, and implement LSAC’s Security Systems Program in keeping with industry standards and best practices.

Nice To Haves

At least 3 years of hands-on experience securing Microsoft Azure and Microsoft 365 environments is strongly preferred.
Ability to write KQL queries is strongly preferred.
Professional certifications such as Microsoft Certified: Information Security Administrator Associate (SC-401), Azure Security Engineer Associate (SC-500), Cybersecurity Architect Expert (SC-100), CISSP, CISM, or relevant GIAC certifications are strongly preferred.

Responsibilities

Improve, manage, and provide direction regarding LSAC security policies, procedures, and best practices, and maintain and enhance the formal Security Systems Program.
Own the design, deployment, and ongoing tuning of Microsoft Purview DLP policies across Exchange Online, SharePoint, OneDrive, Teams, endpoints, and Azure data sources.
Develop and maintain LSAC’s data classification framework, including sensitive information types, trainable classifiers, and sensitivity labels.
Triage, investigate, and resolve DLP alerts and incidents; tune policies to reduce false positives; and report data-handling risk trends to IT leadership.
Administer and enhance Microsoft Purview Information Protection, Insider Risk Management, Data Lifecycle Management, Audit, eDiscovery, and Data Security Posture Management for AI.
Secure LSAC’s Microsoft Azure environment, including identity and access, network security, Key Vault, and Defender for Cloud recommendations and regulatory compliance reporting.
Integrate Purview, Microsoft Defender, and Azure telemetry with Microsoft Sentinel or LSAC’s SIEM to build detections, dashboards, and automated response playbooks.
Lead development of cybersecurity policies addressing existing and emerging threats, including AI acceptable-use and data protection policies, data governance, and compliance.
Perform IT security inspections, tests, system-level audits, and reviews of IT software, hardware, and cloud services in support of annual compliance reviews, including SOC 2, IT and financial audits, and PCI DSS.
Evaluate and recommend security products and services, including hardware and software.
Consult on, monitor, and report on intrusion prevention and detection systems, VPNs, firewalls, and cloud security controls.
Perform network and system vulnerability scans and penetration testing on workstations, servers, network devices, and other systems, and work with appropriate groups to close security gaps.
Develop and support automated tools and queries, such as KQL and PowerShell, to analyze security events in access-control, audit, and cloud logs and identify patterns or evidence of problems.
Provide security consultation and assistance to Infrastructure, Executive Staff, and other departments.
Maintain confidentiality when identifying and assisting with resolution of security issues.
Monitor networks and websites for proper security procedures, software configuration, and signs of compromise or attempted compromise.
Promote and enhance security awareness programs for LSAC staff in partnership with Human Resources.
Participate in Information Security projects and meetings, providing input and recommendations on issues affecting LSAC’s security infrastructure.
Evaluate and recommend solutions to current or potential security threats affecting the data and computing environment.
Participate in the Security Incident Response Team and Test Security Task Force.
Respond to security incidents by providing critical documentation and consultation, preserving records of access-control-list changes to facilitate investigations, and participating in response, root-cause analysis, and solution implementation.
Provide technical leadership and mentorship to Cybersecurity team members and serve as an escalation point for complex investigations.
Keep abreast of industry trends and issues related to computer security.