Information Security Analyst II - KITS Information Security Fusion Center - JR007825

$58,000 - $86,000/Yr

University of Kansas - Kansas City, KS

Full-time - Mid Level

Kansas City, KS

Educational Services

About the position

The Information Security Analyst II at the University of Kansas Medical Center is a key member of the KITS Information Security team, responsible for implementing and evolving a comprehensive information security program. This role focuses on detecting, preventing, and remediating information and cyber security threats, ensuring compliance with security standards, and maintaining security systems and tools. The analyst will engage in incident response, operational tasks, and monitoring of the information security architecture.

Responsibilities

• Create, tailor, and audit security baselines for operating systems and applications.
• Certification of systems and applications to ensure compliance with KUMC security requirements.
• Maintain and update security systems and tools.
• Perform real-time security log and event analysis and take action to contain and mitigate IS threats.
• Review and analyze security events, determine their severity, and author reports detailing the activity including root cause analysis.
• Coordinate and complete IS operations and process documentation.
• Develop and execute approaches to ensure security requirements are achieved.
• Report detected elements concerning identified or residual risk, vulnerabilities, and other security exposures to IS leadership.
• Complete risk reviews for security exceptions and new technologies.
• Inform, assist, and train IS team members and customers with security requests, exceptions, products, and procedures.
• Monitor reports and security logs for unusual events and investigate as needed to achieve a compliant resolution.
• Identify new or emerging IS threats, evaluate the organizational impact, and recommend actions to mitigate.
• Practice critical thinking and other forecasting methods to identify potential security incidents or disasters.
• Develop and improve relationships and communications with OIS customers and partners.
• Communicate and act in a professional, clear, and understandable manner through written and verbal means.
• Operate as a backup to other IS Analysts when needed.
• Participate in after-hours upgrades, troubleshooting, and on-call schedule.

Requirements

• Bachelor's degree in information security, computer science, engineering, telecommunications, systems administration, or a related technical field, or equivalent work experience.
• Two or more years of progressive work experience in information/cyber security.
• Demonstrated knowledge of compliance standards and regulations such as HIPAA, FERPA, GLBA, PCI DSS, NIST, and others.
• Must have one or more of the following certifications: CompTIA Network+, CompTIA Security+, (ISC)2 SSCP, EC-Council ECSA, or earn within the first year of employment.

Nice-to-haves

• Experience configuring and securing MacOS and applications.
• Experience writing and maintaining rules for network firewalls such as Cisco or Palo Alto.
• Experience implementing, operating, maintaining, and supporting information security tools and technologies.
• Experience operating, maintaining, and rule writing within a commercially available SIEM technology.
• Experience with implementing, operating, maintaining, or supporting data loss prevention (DLP) technologies.
• Experience completing risk assessments and related documentation.
• Experience with multiple networking architectures, topologies, practices, and technologies.
• Experience with the Malcolm Baldrige Quality Excellence process and the Cybersecurity Excellence Builder.
• Experience with Firewalls and IDS/IPS, Forensics Tools, Incident Response, Security Monitoring, Threat Intelligence, Coding/Scripting, Vulnerability Assessment, and Securing Windows, Linux, and Mac operating systems.

Benefits

• Health, dental, and vision insurance coverage begins on day one.
• Employer-paid life insurance and long-term disability insurance.
• Paid time off including vacation, sick leave, and ten paid holidays.
• Paid discretionary day after six months of employment.
• Paid time off for bereavement, jury duty, military service, and parental leave after 12 months of employment.
• Retirement program with generous employer contributions and additional voluntary retirement programs (457 or 403b).