Information Security Analyst Tier 1

NYU - New York, NY

Full-time - Entry Level

Remote - New York, NY

Educational Services

About the position

The Information Security Analyst I role at New York University is a critical position focused on maintaining the university's security posture through basic threat detection and incident response activities. The analyst will be responsible for identifying and mitigating security risks by analyzing security events and alerts, executing incident response procedures, and effectively communicating with stakeholders. This role requires a proactive approach to security, including the analysis of multiple data sources and technologies to detect compromised systems and accounts, as well as identifying and mitigating phishing campaigns. Additionally, the analyst will be tasked with identifying and remediating vulnerable operating systems and software. In this position, the analyst will provide initial triage for discovered issues, escalating them as necessary, and contributing to larger incident response efforts when required. The role also involves participating in process improvement initiatives aimed at continuously enhancing the security posture of the university. Collaboration as a team member in a dynamic environment is essential, and the analyst must possess excellent analytical, communication, and problem-solving skills. A high level of confidentiality and professionalism is required, as the analyst will be handling sensitive information. The position may allow for fully remote work, providing flexibility in the work environment while still ensuring that security measures are upheld effectively.

Responsibilities

• Conduct basic threat detection and incident response activities.
• Identify and mitigate security risks by analyzing security events and alerts.
• Execute incident response procedures and assist stakeholders.
• Analyze multiple data sources and technologies to detect compromised systems and accounts.
• Identify and mitigate phishing campaigns.
• Identify and remediate vulnerable operating systems and software.
• Provide initial triage for discovered issues and escalate as needed.
• Contribute to larger incident response efforts when required.
• Participate in process improvement initiatives to enhance security posture.
• Collaborate as a team member in a dynamic environment.

Requirements

• Bachelor's Degree or equivalent combination of education and experience.
• 2+ years experience involving information technology and/or information security, compliance, or risk management.
• Demonstrated understanding of IT security principles and concepts.
• Ability to clearly communicate information and security concepts to non-technical audiences.
• Experience with multiple operating systems, including Windows, Mac OS, or Unix/Linux.
• Strong critical thinking and analytical skills.
• Ability to maintain confidentiality, integrity, and availability of information.

Nice-to-haves

• Bachelor's Degree in a related discipline.
• 2+ years experience working in a large-scale information technology environment.
• Experience using network and system diagnostic tools.
• Basic experience with scripting, programming, or automation methods.
• Basic experience with intrusion detection or system protection tools and methodologies.
• Basic experience with vulnerability scanning tools (e.g., Tenable Nessus, InsightVM, Metasploit, etc.).
• Experience with information security regulatory/compliance requirements.
• Knowledge of foundational security controls and information security best practices.
• Knowledge of enterprise infrastructure and application monitoring tools.
• Familiarity with security frameworks such as CIS, NIST, ISO, and PCI-DSS.
• Familiarity with cloud architecture and security concepts.
• Familiarity with computer network protocols, network security architecture, and computer architecture.

Benefits

• Competitive salary range of USD $65,700.00 to USD $80,300.00 based on experience and qualifications.
• Opportunities for professional development and growth within the university.
• Flexible work arrangements, including the possibility of fully remote work.