Senior Information Security Analyst

UT Southwestern Medical Center • Dallas, TX

2d • Remote

About The Position

We’re looking for an Information Security professional to support and enhance cybersecurity across a decentralized healthcare environment for UT Southwestern. This role protects the confidentiality, integrity, and availability of sensitive data, including patient information. Responsibilities include Implement and promote security best practices; monitor security systems and identify threats, perform risk assessments and address vulnerabilities, ensure compliance with HIPAA and internal policies, collaborate with teams across the organization to strengthen security posture. Our ideal candidate has a strong cybersecurity background, ideally in healthcare, knowledge of risk management and regulatory requirements, and effective communication and collaboration skills. This position is 100% remote with occasional on‑site meetings. Incumbent must reside in Texas.

Requirements

• High School Diploma or equivalent.
• 3 years' experience in information security, cybersecurity operations, incident response, security engineering, or a related technical security discipline or extensive demonstrated hands-on experience using security tools and technology, including vulnerability management, encryption, monitoring systems, and email gateway security solutions.
• Additional education and/or technical training may be considered in lieu of experience.
• Must possess one or more of the following, or obtain within one year of hiring: CompTIA Security+, or CISSP, or CISM, or CEH, or GIAC within 1 Year. Or Other similar industry-recognized security-related certifications within 1 Year.
• Incumbent must reside in Texas.

Nice To Haves

• Bachelor's Degree in a computer science and technology or related field.

Responsibilities

• Direct responses to security incidents to prevent further loss, obtain and preserve forensic evidence, and lead root cause analysis efforts to identify improvement opportunities.
• Maintain a database of security incidents and provide reports to leadership, university management, and external regulatory agencies.
• Work closely with IT, disaster recovery, and application support teams, including the service desk, to ensure rapid incident response and recovery.
• Assist technical support staff in identifying and implementing appropriate security safeguards, ensuring compliance with security patch applications, antivirus management, and virus protection policies.
• Oversee Active Directory protection alerts and remediation to maintain system integrity.
• Collaborate with the IT team to support the disaster recovery plan and ensure alignment with security protocols.
• Respond to email gateway alerts, manage quarantine folder reviews, and coordinate email gateway agent updates.
• Conduct regular reviews of the EDR (Endpoint Detection and Response) and SIEM portals for potential security threats, ensuring prompt remediation of identified issues.
• Aggregate and analyze SIEM logs to detect and respond to security events.
• Administer and review data loss prevention (DLP) tools and TRAP (Threat Response and Adaptive Protection) alerts, ensuring the organization's data is safeguarded.
• Deliver monthly metrics reports, project updates, and yearly penetration testing results to leadership.
• Provide security training and awareness programs for technical and non-technical users.
• Disseminate security notices and alerts, coordinating campus-wide security collaboration and communication initiatives.
• Review quarterly reports to identify and address security concerns related to physical access control systems.
• Work closely with IT, disaster recovery, application support teams, and the service desk to ensure that security measures are integrated across all technology functions.
• Coordinate efforts to resolve service desk tickets related to security incidents and support disaster recovery planning and execution.
• Prepare technical briefings, reports, and slide presentations on security incidents, trends, and initiatives for leadership, ensuring ongoing communication about the organization‿s security posture.
• Provide the management team with intel, threat updates, and escalations, while supporting the Governance, Risk, and Compliance (GRC) and Third-Party Risk Management (TPRM) teams by delivering critical information from security tools to ensure informed decision-making and effective risk management.
• Performs other duties as assigned.

Benefits

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED