New

Ent Security Analyst II

Texas Tech University Health Sciences Center
United States, Texas, Lubbock
3601 4th Street (Show on map)
Jan 30, 2025
Ent Security Analyst II Lubbock 40042BR Position Description The Enterprise Security Analyst II's scope of responsibility includes information security management at the enterprise level. This includes ensuring that necessary safeguards are present, operational, and effective. This position is expected to assist with training team members, lead and/or manage projects, and interface with users, vendors, or other stakeholders in providing operational support. Discretion and sound judgment is expected. Enterprise positions are restricted for use in central IT Division areas reporting to the institutional CIO and, as such, may interface with key IT leadership and/or other functional leadership from the Texas Tech University System institutions. Major/Essential Functions Participates in the execution of vulnerability management systems at the network, system, application, and desktop levels. Performs network/protocol scanning and reporting. Responsible for the research, technical analysis, recommendation, configuration, and administration of systems and procedures to ensure the protection of information processed, stored or transmitted. Develops and installs scripts for the customization or automation of security monitors and intrusion prevention systems. Analyzes systems, processes, or events as a part of formalized Incident Management procedures, including digital forensic investigation and event log analysis Conducts risk and/or vulnerability assessments for active or proposed enterprise hardware and/or software systems and components. Conducts security research in keeping abreast of latest security issues Administers security controls and access lists for network devices including firewalls, switches, routers, servers, and appliances. Performs other duties in support of the Information Security Program. Maintains an active awareness of the evolving security threat landscape. Maintains an active awareness of federal, state, and local regulations and policies. Monitors and analyzes cybersecurity alerts from cybersecurity tools, network devices, and information systems Uses a variety of desktop and/or web-based software and tools to create or modify documentation and to communicate with team members and supervisors. Assist with the training and development of team members. Lead and/or manage projects involving internal and/or external team members. May interface with users, vendors, or other stakeholders. May interface with key IT leadership and/or other functional leadership. Adheres to all appropriate Institutional policies (including IT OPs) and other relevant internal departmental policies. Exercise judgment based on an understanding of organizational policies and activities. Plan and organize effectively, prioritize goals, use time efficiently, and communicate effectively, both orally and in writing. Establish and maintain effective work relationships. Experience in one or more security domains as defined by the ISC2 CISSP Common Body of Knowledge (CBK), which currently includes: Access formation Security and Risk Management. Knowledge of security and risk frameworks, standards, and best practices (e.g., HITRUST CSF, NIST, ISO 27001, COBIT) preferred. Business Continuity/Disaster Recovery Planning. Security Architecture and Design. Physical and Environmental Security. Telecommunications and Network Security. Legal Regulations, Compliance, and Investigations. Required Qualifications Bachelor's degree with coursework in computer science, MIS, IT, or other related area plus one (1) year related full-time paid experience OR a combination of related education and/or experience to equal five (5) years. To apply, please visit: https://sjobs.brassring.com/TGnewUI/Search/home/HomeWithPreLoad?partnerid=25898&siteid=5283&PageType=JobDetails&jobid=883617 All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, disability, genetic information or status as a protected veteran. The Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act is a federal statute requiring colleges and universities participating in federal financial aid programs to maintain and disclose campus crime statistics and security information. By October 1 of each year, institutions must publish and distribute their Annual Campus Security Policy & Crime Statistics Report (ASR) to current and prospective students and employees. You can locate this report through our website at: https://www.ttuhsc.edu/emergency/clery-report.aspx. jeid-e9d781c646643340a3473ddf47f13d8f