Information Security Engineer

Position Classification

FT Admin

Position Summary

The Information Security Engineer is responsible for safeguarding the university’s computer systems, networks, and sensitive data from potential threats and vulnerabilities, such as malware, phishing attacks, unauthorized access, and misconfigurations. This role involves monitoring systems, identifying risks, implementing protective measures, and responding to security incidents to ensure the confidentiality, integrity, and availability of information.

Essential Duties and Responsibilities

Monitoring and Analysis:

• Monitor networks and systems for suspicious activities, anomalies, and potential security breaches.
• Analyze security logs and reports from various tools such as firewalls, intrusion detection/prevention systems (IDS/IPS), and security information and event management (SIEM) platforms.

Incident Response:

• Investigate security alerts, determine root causes, and recommend corrective actions.
• Respond to security incidents by containing, eradicating, and recovering from threats.

Risk Assessment:

• Perform vulnerability assessments and penetration testing to identify and mitigate risks.
• Collaborate with IT teams to address security vulnerabilities in hardware, software, and configurations.

Policy and Compliance:

• Ensure compliance with industry standards, regulations, and internal security policies (e.g., FERPA, HIPAA, ISO 27001, GDPR) by utilizing tools such as compliance management platforms, automated auditing software, and adherence checklists.
• Assist in developing, implementing, and updating security policies and procedures.

Security Tools and Technologies:

• Configure, maintain, and optimize security tools, such as antivirus/EDR, encryption tools, and firewalls.
• Stay current on emerging security technologies by obtaining certifications, participating in training sessions, attending industry events, and engaging in continuous learning. Recommend improvements to enhance the organization’s security posture.

Documentation and Reporting:

• Create detailed reports on security incidents, including findings, actions taken, and future recommendations.
• Maintain documentation of security configurations, processes, and risk assessments.

Minimum Qualifications

Education – A college degree or four to eight years of work experience in a related field.

Employment - Two years to five years (Equivalent combination of education and employment).

Preferred Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 3-5 years of experience in information security or a related IT role.
• Hands-on experience with firewalls, IDS/IPS, SIEMs, and endpoint protection tools.

Knowledge, Skills, and Abilities

• Strong collaboration and communication skills to work effectively across teams and with stakeholders.
• Ability to explain technical security concepts to non-technical audiences.
• Attention to detail and the ability to multitask in a dynamic environment.
• Strong understanding of network protocols, operating systems, and cybersecurity tools.
• Analytical and problem-solving skills to identify and mitigate risks.
• Familiarity with scripting languages (e.g., Python, PowerShell) is a plus.

Physical Requirements

Job may require lifting light weight objects (1 to 10 pounds) with no repetitive bending or stooping. Occasionally lift average weight objects (1 to 10 pounds).

Work Environment

Regular exposure to favorable conditions such as those found in a normal office.

Salary/Pay Information

$65K to $75K Annually

Anticipated Schedule

Monday to Friday 8.30 AM to 5.00 PM.

Full-time, on-site with opportunities to work from home per policy.

May require after-hours support for critical security incidents.