Enterprise Security Analyst I
Position Description The Enterprise Security Analyst I's scope of responsibility includes information security management at the enterprise level. This includes ensuring that necessary safeguards are present, operational, and effective. Discretion and sound judgment is expected. Enterprise positions are restricted for use in central IT Division areas reporting to the institutional CIO and, as such, may interface with key IT leadership and/or other functional leadership from the Texas Tech University System institutions.
About the University Established in 1923, Texas Tech University is a Carnegie R1 (very high research activity) Doctoral/Research-Extensive, Hispanic Serving, and state-assisted institution. Located on a beautiful 1,850-acre campus in Lubbock, a city in West Texas with a growing metropolitan-area population of over 300,000, the university enrolls over 40,000 students with 33,000 undergraduate and 7,000 graduate students. As the primary research institution in the western two-thirds of the state, Texas Tech University is home to 10 colleges, the Schools of Law and Veterinary Medicine, and the Graduate School. The flagship of the Texas Tech University System, Texas Tech is dedicated to student success by preparing learners to be ethical leaders for a diverse and globally competitive workforce. It is committed to enhancing the cultural and economic development of the state, nation, and world. About Lubbock:Referred to as the "Hub City" because it serves as the educational, cultural, economic, and health care hub of the South Plains region, Lubbock boasts a diverse population and a strong connection to community, history, and land. With a mild climate, highly rated public schools, and a low cost of living, Lubbock is a family-friendly community that is ranked as one of the best places to live in Texas. Lubbock is home to a celebrated and ever-evolving music scene, a vibrant arts community, and is within driving distance of Dallas, Austin, Santa Fe, and other major metropolitan cities. Lubbock's Convention & Visitors Bureau provides a comprehensive overview of the Lubbock community and its resources, programs, events, and histories.
Major/Essential Functions The Enterprise Security Analyst's scope of responsibility includes information security management at the enterprise level.
With close supervision and/or assistance from team members, performs one or more of the following duties:
- Participates in the execution of vulnerability management systems at the network, system, application, and desktop levels.
- Performs network/protocol scanning and reporting.
- Develops and installs scripts for the customization or automation of security monitors and intrusion prevention systems.
- Analyzes systems, processes, or events as a part of formalized Incident Management procedures, including digital forensic investigation and event log analysis.
- Administers Access Control Systems and Policies including Access Requests, Identity Management Physical Access, or Surveillance Systems.
- Conducts risk and/or vulnerability assessments for active or proposed enterprise hardware and/or software systems and components.
- Administers security controls and access lists for network devices including firewalls, switches, routers, servers, and appliances.
- Performs other duties in support of the Information Security Program.
- Maintains an active awareness of the evolving security threat landscape.
- Maintains an active awareness of federal, state, and local regulations and policies.
- May interface with users, vendors, or other stakeholders.
- Uses a variety of desktop and/or web-based software and tools to create or modify documentation and to communicate with team members and supervisors.
- May interface with key IT leadership and/or other functional leadership from the Texas Tech University System institutions.
- Adheres to all appropriate Institutional policies (including IT OPs) and other relevant internal departmental policies.
- Performs tasks assigned by supervisor accurately and in a timely manner. Assists with other relevant activities as requested by departmental and IT divisional leadership.
Knowledge, Skills, Abilities: Ability to:
- Exercise judgment based on an understanding of organizational policies and activities.
- Plan and organize effectively, prioritize goals, use time efficiently, and stay on task.
- Communicate effectively, both orally and in writing.
- Establish and maintain effective work relationships.
- Experience in one or more security domains as defined by the ISC2 CISSP Common Body of Knowledge (CBK), which currently includes:
- Access Control
- Information Security and Risk Management.
- Application Security
- Operations Security.
- Business Continuity/Disaster Recovery Planning.
- Security Architecture and Design.
- Physical and Environmental Security.
- Telecommunications and Network Security.
- Cryptography.
- Legal Regulations, Compliance, and Investigations.
- Requires a very high level of proficiency in the theoretical and practical application of specialized knowledge in computer system analysis, programming, and software engineering, relating to IT Security.
- Professional certifications are not required, but Microsoft, Cisco, or CISSP certifications may be preferred qualifications.
Required Qualifications Bachelor's degree with coursework in computer science, MIS, IT, or other related area OR a combination of related education and/or experience. Applicants for this Security Sensitive Level II position will be subject to a criminal background check and must pass a drug and alcohol test after a conditional offer of employment has been extended, but before employment can be confirmed.
Safety Information Adherence to robust safety practices and compliance with all applicable health and safety regulations are responsibilities of all TTU employees.
Does this position work in a research laboratory? No
Required Attachments Cover Letter, Professional/Personal References, Resume / CV
Optional Attachments Professional License/Certification, Recommendation/Referral
Pay Statement Compensation is commensurate upon the qualifications of the individual selected and budgetary guidelines of the hiring department, as well as the institutional pay plan. For additional information, please reference the institutional pay plan by visiting www.depts.ttu.edu/hr/payplan.
Schedule Details M-F 8am-5pm Call back and on-call flexible duty hours
EEO Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, disability, genetic information or status as a protected veteran.
|