Information Security Analyst

State University of New York - Binghamton, NY

Full-time - Entry Level

Binghamton, NY

10,001+ employees

Educational Services

About the position

The Information Security Analyst at Binghamton University plays a crucial role in enhancing the university's information security capabilities. This position involves developing and implementing security controls, responding to security incidents, and ensuring compliance across administrative and academic systems. The analyst will collaborate with various teams to design security initiatives and serve as a resource for information security technologies and compliance requirements.

Responsibilities

• Assist the Chief Information Security Officer in developing and maintaining information security capabilities.
• Implement security controls and respond to information security incidents.
• Monitor administrative and academic systems for policy enforcement and compliance.
• Triage, process, and close out technical client requests.
• Track and ensure timely resolution of audit and risk assessment findings related to information security.
• Recommend remediation strategies and technologies for mitigating risks.
• Evaluate current and future requirements and develop or recommend technical and operational solutions.
• Support and manage risk mitigation tools as needed.
• Develop specifications and standards for equipment, software, and procedures in support of University policies.
• Investigate internal and external reports of information security issues.
• Analyze results from intrusion detection systems and other tools to detect and mitigate vulnerabilities.
• Maintain audit and oversight of processes, procedures, and tools used to ensure security controls.
• Prepare reports and maintain metrics.
• Perform trend and root cause analysis.
• Liaison with various University constituencies on behalf of the CISO.

Requirements

• Bachelor's degree or Bachelor's degree completion by January 2025, or Associates degree plus 2 years' experience.
• Demonstrated competence in information security concepts.
• Strong written and oral communication skills.
• Effective problem-solving, interpersonal, and multitasking skills.
• Ability to work with multiple constituencies within a culturally diverse environment.

Nice-to-haves

• Experience with cybersecurity.
• Experience with Incident Management/Response.
• Experience with Endpoint Detection and Response, Carbon Black EDR.
• Experience with Splunk or log files.
• Understanding of network topologies, architectures, protocols, and addressing schemes.
• Knowledge of Unix and Windows-based security tools (e.g., nmap, Snort).
• Familiarity with programming or scripting languages (e.g., python, php, ruby, bash).
• Experience with Data Loss Prevention (DLP).
• Knowledge of regulatory compliance frameworks such as NIST, PCI-DSS, FERPA, GLBA, HIPAA.

Benefits

• Competitive salary commensurate with qualifications and experience.
• Opportunities for professional development and training.