System Security Specialist

JOB PURPOSE

The System Security Analyst is responsible for the day-to-day operations of the Information Security and access management team. This role works closely with both the Identity Management (IDM) and Operations Team Leads to support various aspects of information security functions provided for the University and within a collaborative and multifaceted team environment. This position reports to the Senior Director, Chief Information Security Officer.

ESSENTIAL FUNCTIONS

(Essential functions are the primary duties/major job responsibilities that an employee must be able to perform, with or without reasonable accommodation. The essential functions are listed in order of importance.)

Firewall Change Requests

Analyze requested changes to existing firewall rulesets. Prove demonstrated need for rule changes and accuracy of addressed changes, obtaining proof and documentation where needed. Identify specific firewalls to be modified and creation of rule elements with least-privilege concepts in mind. Accurately create and deploy changes appropriate for each firewall device. Log and document all changes to firewall configurations and rulesets.

Access Management

Act as the first responder to Enterprise System access and de-provisioning request. Triage and address any low-level inquires related to identity and system access. Maintain documentation of the Enterprise System Access Process.

Operate University Security Tools

Configure, maintain and provide daily operations of the tools that provide information security services such as vulnerability management scanning and issuing SSL certificates. Light system management of other SaaS based tools that provide services such as 2FA, Password management and Security Training.

Triage Incoming Operations Incidents

Monitor incoming incident queue and act as first responder. Identify relevance, credibility, and criticality of reported events. Gather additional logs or information to verify incident claims. Escalate critical or important incidents to senior staff.

Address, Investigate, Document, and Resolve Low Level Security Incidents

Act as primary responder for identified low-level incidents. Gather and analyze system logs, network captures, and external data during investigative process. Resolve and respond to incident per established procedures. Document and log all aspects of investigation.

Identify Issues and Work on Security Projects

Understand current security landscape in relation to existing Information Security Program. Identify areas of improvement where organizational risks can be minimized or existing risks can be dealt with in a more efficient manner. Work on security projects at the direction and guidance of the Information Security Officer.

Perform other related duties as assigned.