Information Security Analyst

$78,050 - $117,150/Yr

Tufts University - Somerville, MA

Full-time - Entry Level

Somerville, MA

Educational Services

About the position

Tufts Technology Services (TTS) is a university-wide service organization dedicated to providing adaptable and results-driven technology solutions that support Tufts' mission of teaching, learning, research, innovation, and sustainability. The Information Security Analyst plays a crucial role in this mission by performing security operations, analysis, and project work under some supervision. This position involves collaboration with the TTS Information Security team and representatives across the university to implement and maintain effective security and privacy practices. The analyst is responsible for researching, informing, and preventing security and compliance risks, as well as detecting, responding to, and recovering from security incidents. The analyst's responsibilities include responding to suspicious cybersecurity activities, incidents, and tickets, analyzing information from various sources such as logs and data from network devices, applications, and security tools. The role requires identifying process improvements and automating tasks wherever possible, maintaining and configuring security tools, writing security documentation, and performing security and privacy risk assessments. The analyst will assist in deploying and monitoring security threat detection technologies and will conduct forensic investigations in response to suspicious activities. In addition to these core responsibilities, the Information Security Analyst will drive quality security operational processes by writing troubleshooting articles, training help desk staff, and creating standard operational procedures. The analyst will also help develop and maintain metrics and reports, identify tasks for automation, and contribute to building a security awareness training program. This position may require occasional weekend and evening hours and participation in a 24x7 on-call rotation for major IT outages and security incidents. The role is designated as remote but requires the ability to commute to all three campuses as needed.

Responsibilities

• Respond to suspicious cybersecurity activities, incidents, and tickets.
• Analyze information from various sources including logs and data from network devices, applications, and security tools.
• Identify process improvements and automate tasks wherever possible.
• Maintain and configure security tools to appropriate needs.
• Write security documentation, training, and operational procedures.
• Process security requests and perform security and privacy risk assessments.
• Assist with deploying and monitoring security threat detection technologies.
• Research device and user network activities using security tools and analyze the resulting information for patterns and security concerns.
• Monitor and perform forensic investigations and respond to suspicious activities.
• Perform security risk and vulnerability assessments and run vulnerability scanning tools.

Requirements

• Bachelor's degree or High School Diploma plus 7 years' experience.
• 3-5 years IT experience.
• At least 1 year of experience with duties requiring familiarity with security issues, concepts, practices, and procedures.
• Understanding of networks, IP addresses, and DNS.
• Windows and Mac configuration and system administration experience.
• Experience performing security tasks such as virus cleanup, antivirus management, password management, patching, log analysis, firewalls, SPAM, and vulnerability scans.
• Good communication skills including writing documentation and presenting to groups.
• Basic understanding of compliance regulations such as PCI, Data Privacy, and HIPAA.
• Ability to multi-task and work under stress.

Nice-to-haves

• Certifications such as CompTIA Security+, GIAC Information Security Fundamentals, Microsoft Certified Systems Administrator, Cisco Certified Network Associate Security (CCNA Security).
• Scripting languages or code development for task automation.
• Familiarity with non-profit or academic environments.

Benefits

• Flexible work environment
• Professional development opportunities
• Diversity and inclusion initiatives
• Remote work options
• Health and wellness programs