Information Security Analyst Jobs

Job Summary
UT Southwestern is looking to hire an Information Security Analyst in their Information Security department.
Experience and Education
Required:
Bachelor's Degree in a computer science and technology or related field. Two (2) years of experience in an information security position role.
Prior experience with software or appliances used for vulnerability scanning, remote system administration, network monitoring and protection, and security notification preferred.
Experience as a network, server, database, or application administrator.
Experience as a security or technology administrator in Higher Education or similarly decentralized environment.
Experience using Project Management and System Development Lifecycle methodologies. Relevant information security certifications (e.g., CISSP, CISA/CISM, Security+, GIAC).
Experience using the following or similar information security technologies: Vulnerability scanners (Nmap, Nessus, Critical Watch) CVE (Common Vulnerabilities and Exposures) databases Network monitoring and protection systems (Intrusion Detection/Prevention Systems) Ticket tracking systems (Heat, Remedy)
Associates degree and/or additional years of related experience may be considered in lieu of stated educational requirement on a year for year basis.
Prefer one or more years of experience in an information security position or role.
Experience as a network, server, database or application administrator.
Experience as a security or technology administrator in Higher Education or similarly decentralized environment.
Experience using Project Management and System Development Lifecycle methodologies.
Relevant information security certifications (e.g. CISSP, CISA/CISM, Security+, GIAC).
Experience using the following or similar information security technologies:
Vulnerability scanners (Nmap, Nessus, Critical Watch), CVE (Common Vulnerabilities and Exposures)databases, Network monitoring and protection systems (Intrusion detection/ Prevention Systems)Ticket tracking systems (Heat, Remedy).
Job Duties
Assists with risk analysis and risk assessments on existing and proposed systems, document findings, and recommends risk mitigation strategies.
Performs and documents the results of vulnerability and penetration testing.
Assists departmental technical support staff in identifying and implementing appropriate security safeguards.
Coordinates efforts to ensure compliance with security patch application and virus protection policies.
Assists with responses to security incidents to prevent additional loss and to obtain and preserve forensic evidence.
Participates in root cause analysis efforts to determine improvement opportunities when failures occur.
Maintains a database of registered servers and ensures accurate information pertaining to data classification and protection strategies.
Disseminates security notices and alerts to campus technical support personnel.
Remains knowledgeable of changes in security technology, industry practices, and state and federal regulatory requirements.
Conducts security training and develops awareness programs and materials for both technical and non-technical computer users.
Assists with the creation of policies and procedures to ensure the security of information assets against unauthorized or accidental modification, destruction, or disclosure.
Performs other duties as assigned.
Other Duties:
Identify, promote, and implement information security best practices in a decentralized academic environment.
Provide expertise, consulting, and problem resolution in areas of network, server, database, application, and end point security assurance.
Conducts risk analysis and risk assessments on existing and proposed systems, document findings, and recommend risk mitigation strategies.
Assists departmental technical support staff in identifying and implementing appropriate security safeguards and coordinates efforts to assure compliance with security patch application and virus protection policies.
Directs root cause analysis efforts to determine improvement opportunities when failures occur.
Assists Coordinates campus-wide information security collaboration and communication initiatives.
Drafts policies and procedures and makes recommendations to ensure the security of information assets against unauthorized or accidental modification, destruction, or disclosure.
Security
This position is security-sensitive and subject to Texas Education Code §51.215, which authorizes UT Southwestern to obtain criminal history record information. UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.
To learn more, please visit: why-work-here/diversity-inclusion