Cyber Security Analyst

Mt. Hood Community College - Gresham, OR

Part-time - Entry Level

Gresham, OR

Educational Services

About the position

The Cyber Security Analyst at Mt. Hood Community College is responsible for monitoring and analyzing the college's network and systems to identify potential security breaches, incidents, and vulnerabilities. This role involves performing risk assessments and audits to mitigate cyber risks and gaps, as well as implementing and maintaining security tools and solutions to protect against various threats, vulnerabilities, and attacks. The analyst will respond to and investigate security incidents, providing security awareness and training to staff and users. As a technical subject matter expert in cyber security, the analyst will work closely with the IT Infrastructure team to make approved security-related changes to the college's infrastructure systems and collaborate with the Chief Information Officer (CIO) on special requests, consultations, and strategic projects. In addition to monitoring computer networks and Internet connectivity for security issues, the Cyber Security Analyst will conduct research, analyze systems, perform tests, and evaluate current security systems to uncover vulnerabilities and threats. The analyst will escalate issues, assist with containment, and help repair detected vulnerabilities to maintain high-security standards. This position also involves documenting security breaches and analyzing incidents, performing periodic audits, and working directly with the CIO on findings related to internal IT operations. The analyst will participate in the installation, configuration, testing, and troubleshooting of security measures and software, including firewalls and data protection systems. They will define access privileges and control structures to protect technology systems and coordinate security-related software upgrades. Keeping current on information technology security trends, the analyst will research security enhancements and develop, recommend, and implement best practices, technologies, standards, policies, and procedures for IT security across the college. The role includes leading cross-functional teams, developing and delivering training programs, and preparing various technical reports on assigned functions and activities. The Cyber Security Analyst will also serve as the point-of-contact for external agencies during audits and oversee security work direction for IT staff and apprentices.

Responsibilities

• Monitor and analyze the college's network and systems for potential security breaches, incidents, and vulnerabilities.
• Perform risk assessments and audits to identify and mitigate cyber risks and gaps.
• Implement and maintain security tools and solutions to protect against threats, vulnerabilities, and attacks.
• Respond to and investigate security incidents and events, providing security awareness and training to staff and users.
• Serve as a technical subject matter expert in cyber security and related tools and processes.
• Make approved security-related changes to the college's infrastructure systems in conjunction with the IT Infrastructure team.
• Work directly with the Chief Information Officer (CIO) on special requests, consultations, and strategic projects.
• Participate in monitoring computer networks and Internet connectivity for security issues and events.
• Conduct research, analyze systems, perform tests, and evaluate current security systems to uncover vulnerabilities and threats.
• Document security breaches and analyze cyber security incidents, violations, issues, and findings.
• Perform periodic audits and work directly with the CIO on audit findings related to internal IT operations.
• Install, configure, test, and troubleshoot security measures and software, including firewalls and data protection systems.
• Define access privileges and control structures to protect technology systems.
• Coordinate security-related software upgrades and document configurations and system specifications.
• Keep current on information technology security trends, standards, and news; research security enhancements.
• Develop, recommend, and implement best practices, technologies, standards, policies, and procedures for IT security.
• Lead and participate in cross-functional teams as the cyber-security expert.
• Develop and deliver user training and security awareness programs.
• Prepare and present technical, data, and narrative reports on assigned functions and activities.
• Serve as the point-of-contact for external agencies during cyber-security audits and follow through on audit findings.
• Oversee and provide security work direction and guidance to IT staff and apprentices.

Requirements

• Associate's Degree in cybersecurity, network security, or closely related field.
• Minimum of 2 years of applied work experience in cyber security, tools, and operational practices including network, infrastructure, and provisioning.
• CompTIA CySA+ or equivalent certifications.
• Experience in security standards and frameworks such as NIST, ISO, CIS Controls, GDPR, SOC2, HIPAA, and PCI-DSS.
• Additional experience may be substituted for education on a year-for-year basis.

Nice-to-haves

• Enterprise-level cyber work experience (100 users or greater).
• Microsoft Security Operations Analyst Associate, Microsoft Identity and Access Administrator Associate, or industry-specific equivalent certifications.
• Microsoft/Azure certifications.
• Experience and proficiency in Microsoft security tools such as Azure, Microsoft Defender, Microsoft Sentinel, and Microsoft 365 Security.
• Experience utilizing Identity Access Management systems.