Information Security Operations Analyst

University of California - Los Angeles, CA

Full-time - Mid Level

Los Angeles, CA

Educational Services

About the position

The Information Security Operations Analyst at UCLA plays a crucial role in safeguarding the university's systems and data. This position is responsible for detecting, analyzing, and responding to security incidents and threats that may affect the organization's networks, systems, and data. The analyst will conduct vulnerability scans and penetration tests on campus systems, operate and monitor network and host-based intrusion detection/prevention systems, and recommend security solutions. Additionally, the analyst will advise on systems and application-level security configurations and investigate and mitigate security risks as necessary. This role is integral to enhancing UCLA's operations and culture by protecting the information and data of university stakeholders, thereby supporting the institution's academic mission. The Information Security Operations Analyst will deliver exceptional security services consistently across faculty, staff, and students, aligning with UCLA's vision and modeling its culture and values. The position requires a proactive approach to cybersecurity, ensuring that the university's information resources are secure and resilient against potential threats. The analyst will also be involved in incident after-action reviews, providing recommendations for mitigation strategies to prevent recurrence of incidents. Strong communication skills are essential, as the analyst will need to convey technical information effectively to a diverse community of colleagues and stakeholders. The role demands a balance of technical expertise and interpersonal skills to foster positive working relationships and support concurrent projects in a fast-paced environment.

Responsibilities

• Detect, analyze, and respond to security incidents and threats within the organization's networks, systems, and data.
• Conduct vulnerability scans and penetration tests on campus systems.
• Operate and monitor network and host-based intrusion detection/prevention systems.
• Recommend security solutions and advise on systems and application-level security configurations.
• Investigate and mitigate security risks as required.
• Conduct incident after-action reviews and recommend mitigation strategies to avoid recurrence.
• Communicate technical information and ideas to a diverse community of colleagues and stakeholders.
• Establish and advance positive working relationships with team members, stakeholders, and customers.
• Balance competing priorities and support concurrent projects using project management practices.
• Participate in activities to advance an inclusive environment that values equity, diversity, inclusion, and belonging.

Requirements

• Three or more years of experience in cybersecurity, computer science, computer information systems, or a related field.
• Experience using IT security systems and tools, including extended detection and response (XDR).
• Experience using IT security systems and tools, including network intrusion detection and prevention (IDS/IPS) systems, and security information event management (SIEM) platforms.
• Experience in performing cyber threat hunting including log analysis, digital forensics, and penetration testing.
• Demonstrated skills applying security controls to computer software and hardware.
• Proficiency in conducting incident after-action reviews and recommending mitigation strategies to avoid recurrence.
• Strong written and verbal communication skills.
• Strong organizational skills and ability to balance competing priorities.
• Strong demonstrated problem-solving skills.
• Ability to participate in activities to advance an inclusive environment that values equity, diversity, inclusion, and belonging.
• Ability to think creatively and propose innovative ideas.

Nice-to-haves

• Five or more years of experience in cybersecurity, computer science, computer information systems, or a related field.
• Experience in complex higher education environments, serving academic and administrative functions of a large public university.

Benefits

• Comprehensive benefits starting on day one.
• Salary offers consider factors including budget, prior experience, skills, knowledge, abilities, education, licensure and certifications.
• Hybrid work arrangement with regular campus visits as needed.