Job Description
Information Security Analyst - Computing and Technology Services (CTS) Salary: Commensuratewith experience
Benefits: The University offers generousbenefits including paid time off (holidays, holy days and vacation), employermatching contributions to the retirement plan, and tuition benefits foremployees and their eligible dependents. Learn more and explore benefits at
Location: Computing and Technology Services
Position Status: Full-time (35 hours perweek)
Hours: Varied
Position Number: 239313/10-1183
FLSA Status: Exempt
POSITIONSUMMARY: This position is responsible for the support of Duquesne University's CyberSecurity program which includes detection, prevention, incident response andtraining & awareness as organized and operated by Computing and TechnologyServices (CTS), the Duquesne University's central IT organization.
This position will help develop and support information security systemsand programs. The position will also monitor, analyze, and prioritize threatsand respond to risks facing the University's systems and data. In addition,this position will assist with identifying and reporting all security issues,monitoring threat intelligence feeds, and confirming that threat mitigation isin accordance with company standards. This position collaborates with allbusiness units to help respond to security alerts and phishing emails, as wellas recommending emerging cybersecurity tools and best practices.
DUTIESAND RESPONSIBILITIES: Build, deploy, support,monitor and configure various tools used to scan and monitor various aspects ofcomputer, account, or network security and respond to computer security, abuse,and e-discovery incidents. This will entail monitoring intrusion detection,vulnerability scanning and log correlation systems; doing research; scanningmachines; reviewing usage logs; etc. to confirm reports and perform forensicanalysis according to established procedures. User contact will also be neededin order to inform people of breaches as necessary, and to obtain detailedinformation.
Provide threat assessmentand remediation which includes evaluating how threats impact the University,communicating that information and implementing or recommending techniques tomitigate the threat. Provide detailed information to the Help Desk so that thecampus community can be informed of new threats or other security issues asneeded. Review logs and reports of all in-place devices, whether they be underdirect control (i.e. security tools) or not (e.g. workstations, servers,network devices). Interpret the implications of that activity and devise plansfor appropriate resolution.
Executing incident responseprocedures and processes to identify computer security incidents, containintrusions and recommend options for eradication & recovery all the whileeffectively communicating with both internal and external customers andescalating as necessary which may require off-hours work as it requires 24/7coverage by the department.
Deliver training andawareness services by providing training documentation and announcements forsecurity & abuse issues and current threats. Collaborate with end usersupport groups to provide training and awareness to campus on information securityactivities, trends and threats.
Participates in externalcommunity outreach and professional activities related to their field,according to their own interest, and affected by relevance to key challengesfor CTS and/or Duquesne University. For example, works with externalorganizations, e.g., EDUCAUSE, on projects or efforts that enhance thereputation of the university as well as maintains proficiency and/orcontributes to his/her professional development.
Participate in on-going professional development (attending/presenting atconferences, meetings, etc.).
Perform other duties and projects as needed.
REQUIREMENTS: Minimum qualifications: Bachelor's degree from an accredited educational institution (Cybersecurity, Computer Science, InformationSecurity, Information Sciences, or Business is preferred).
Valid PA Driver'slicense
1-3 years workrelated experience
2-3 years ofexperience in an information security role or capacity.
Informationsecurity program experience such as incident management, vulnerabilitymanagement, data-loss prevention, endpoint protection, security informationevent management (SIEM), intrusion detection systems, intrusion preventionsystems, malware analysis, and network situational awareness.
Demonstratedunderstanding and knowledge of information technology areas such as servermanagement, operating systems configuration, software configuration, andnetworking.
Experience with avariety of operating systems including Windows, Macintosh and/or Linux isrequired.
Programming andscripting experience (PowerShell, Python, etc.).
Digital Forensicsand E-Discovery
Preferredqualifications: InformationSecurity Certifications are preferred, such as ISC2 Certified in Cybersecurity(CC), GIAC Security Essentials Certification (GSEC), CompTIA Security+
CompTIA Security+preferred within one year of hire.
ISC2 Certified inCybersecurity (CC) preferred within one year of hire.
Experience in ahigher education environment is also preferred.
Alternatively,the successful candidate may possess any equivalent combination of experienceand training, which provides the knowledge, skills and abilities required toperform the essential job functions. This includes, but is not limited to, thefollowing:
Knowledge& Experience:
Experience with security tools such as: Firewalls,Intrusion Detection System (IDS)/Intrusion Protection System (IPS), SecurityInformation Event Systems (SIEM), Endpoint Detection and Response (EDR) Tools,Vulnerability Management Solutions, and scripting tools.
Experience with threat hunting, which consists ofsearching through networks and datasets to identify malicious activity orIndicators of Compromise (IOCs).
Understanding of IP, TCP/IP, and other networkadministration protocols.
Understanding of Windows, Macintosh, and/or Linuxoperating systems.
Familiarity with Information Technology servicemanagement (ITSM) tools.
Experience withemail security and other cloud-based security features.
Experience with CybersecurityTraining Awareness platforms.
Experience withThird Party Risk Management Reviews and Information Technology audits.
Experience withIncident Response troubleshooting and activities.
Personal Attributes:
Proven analytical and problem-solving abilities.
Ability to effectively prioritize and execute tasks in ahigh-pressure environment.
Excellent written, oral, and interpersonal communicationskills.
Ability to conduct research regarding IT security issuesand products as required.
Ability to present ideas in business-friendly anduser-friendly language.
Highly self-motivated and directed.
Keen attention to detail.
Team-orientedand skilled in working within a collaborative environment.
Ability toestablish and maintain effective working relationships with the UniversityCommunity.
Ability and willingness to contribute actively to the mission of the Universityand to respect the Spiritan Catholic identity of Duquesne University. Themission is implemented through a commitment to academic excellence, a spirit ofservice, moral and spiritual values, sensitivity to world concerns, and anecumenical campus community.
APPLICATIONINSTRUCTIONS:
Applicants are asked to submit a cover letter, resume, and contact informationfor three professional references.
DuquesneUniversity was founded in 1878 by its sponsoring religious community, theCongregation of the Holy Spirit. Duquesne University is Catholic inmission and ecumenical in spirit. Motivated by its Catholic identity,Duquesne values equality of opportunity both as an educational institution andas an employer.
Job Tags
Full time