Senior IT Security Analyst

Role overview

Threat hunting and detection

• Conduct hypothesis-driven hunts across cloud, network, identity, and endpoint telemetry.
• Develop, test, document, and tune detection logic, correlation rules, behavioral analytics, dashboards, and alerts in security platforms.
• Map adversary behaviors, hypotheses, and detections to recognized frameworks; use threat intelligence to prioritize relevant tactics, techniques, and procedures.
• Measure detection effectiveness and coverage, identify visibility gaps and false-positive drivers, and improve detection fidelity and response time.

Incident response and security operations

• Monitor and analyze alerts, validate incidents, determine scope and impact, and prioritize response by risk and business context.
• Lead or support evidence preservation, timeline development, root cause analysis, containment, eradication, recovery, and post-incident review.
• Analyze endpoint, network, cloud, identity, and malware evidence to identify attack vectors, persistence, lateral movement, command-and-control activity, and potential data exposure.
• Maintain investigation procedures, response playbooks, escalation criteria, and case documentation; communicate findings and recommended actions.

Risk reduction and collaboration

• Use vulnerability, exposure, asset, and threat data to prioritize remediation and validate risk reduction.
• Collaborate with IT administrators, engineers, application owners, and service providers to remediate findings and implement lasting security solutions.
• Automate recurring analysis, enrichment, investigation, reporting, and response using scripting, orchestration, APIs, and platform integrations.
• Develop metrics and reports; evaluate emerging threats and technologies; recommend safeguards and process improvements; support audits, assessments, and exercises.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Five years of experience in a related field.

Desired qualifications

• Desired experience includes security monitoring, threat hunting, detection engineering, digital forensics, and incident response in a large or complex enterprise environment.

Emergency availability

• During university emergencies or closures, the employee is expected to be available to report to work as needed when notified by the department administrator.