Senior Security Analyst, Information Security Office

Pepperdine University•Malibu, CA

2d•Onsite

About The Position

Works with the Director, Information Security and Manager, Security Operations to implement the stated mission of the Information Security Office (ISO) to preserve trust in the University and protect student data. Improves, manages, consults collaboratively to perform security intrusion, incident and event analysis. Assists with operation, measurement and reporting for information security systems.

Requirements

SANS 503 - Intrusion Detection In Depth current certification or equivalent.
Three (3) years IT or Information Security experience.
Practical TCP/IP knowledge to the level of expertise in access control lists and low level packet analysis.
Installation and management of Windows systems.
Familiarity with Perl, Unix command line, and Powershell.

Nice To Haves

Additional advanced technical certifications equivalent to SANS 5xx or 6xx courses.
Experience sufficient to read procedural documentation to effectively operate department systems.
Experience in data reporting and documentation writing.
Knowledge of perl or other web or system administration scripting languages to the level of timely troubleshooting unfamiliar scripts and creating new ones.
Familiarity with Palo Alto Firewalls, QualysGuard Vulnerability Management, FortiNAC.

Responsibilities

Maintain configurations and updates for firewall, IDS, NAC, DHCP, DNS and other security systems and use professional judgment to determine whether and how the requests shall be implemented to provide best security and service.
Oversee operation and manage documentation for systems security tools.
Work closely with the Director, Information Security and other analysts to document and ensure that security best practices and University security policies are being followed for configuration and updates.
Integrate security controls and best practices into their IT procedures.
Promote understanding and compliance with incident handling procedures among IT teams.
Network with colleagues to collect input and propose improvements to procedures.
Analyze University business processes with information security implications and work with colleagues in business units to improve security and efficiency of the process.
Protect the University's infrastructure from attack and from unauthorized access, modification or destruction.
Perform, develop, and improve vulnerability scanning, intrusion detection, and log analysis.
Develop and improve upon the mature ISO incident handling procedures according to the standard Incident Handling pattern (Preparation, Identification, Containment, Eradication, Restoration, and Lessons Learned).
Use system and network data to identify threats, misconfigurations, and vulnerabilities in network and system infrastructure.
Develop, automate, promulgate, and present reports on results of this analysis and measured effectiveness of security controls developed or under management.
Participate regularly in attack/vulnerability recognition and defense, based on security event review methods developed and improved by the Sr. Analyst or other members of the ISO team.
Provides backup support and assistance to other team members.
Collaborates with co-workers and University colleagues on departmental, division-wide, and institutional projects.
Shares process information and makes recommendations on how to improve processes and overall job execution within the team/department.
Attends training sessions, vendor presentations, user group meetings, conferences, and seminars.
Engages regularly in individual professional development related activities, including formal certifications related to information security to remain current with industry technology trends and work processes.
Volunteers to undertake tasks that stretch the employee's capabilities.
Contributes leadership and expertise on various committees within the Information Technology division.
Participates in external University committees.
Performs other related duties as assigned.
Understands and supports the Christian mission of the University.
Upholds the University mission through team, location, atmosphere, and work performed.