Information Security Analyst I

• Review and analyze security events, determine severity, and author reports detailing the activity.

• Develop and maintain security operations documentation, including procedures, playbooks, escalation paths, and incident records.

• Develop strategies and plans with leadership to enforce security requirements and address identified risks.

• Detect and report residual risks, vulnerabilities, and other security exposures to IS management, including misuse of information assets and noncompliance.

• Review security authorization and exception requests, provide risk-based recommendations, and escalate requests that exceed established approval authority.

• Monitor reports and security logs for unusual events. Investigate events and data to determine appropriate resolution. Research and assess new threats and security alerts and recommend remedial actions.

• Monitor KUMC's networks for security breaches and investigate violations.

• Monitor intrusion detection and prevention systems, network vulnerability systems, antivirus, and encryption systems.

• Respond to and escalate events and maintain documented monitoring and response processes.

• Analyze log files from a variety of source systems to construct the narrative of a security incident.

• Support information security incident management activities, including triage, investigation, containment, remediation, recovery, documentation, and post-incident review.

• Provide frontline support and guidance to IT support staff and users on security issues.

• Establish and maintain business and technical relationships with internal and external stakeholders.

• Provide implementation guidance and user support for security technologies, controls, and procedures.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. It is only a summary of the typical functions of the job, not an exhaustive list of all possible job responsibilities, tasks, duties, and assignments. Furthermore, job duties, responsibilities and activities may change at any time with or without notice.

Work Environment:

• Must be available to participate in an on-call rotation schedule.

• May be required to work outside normal business hours, including nights, weekends, and holidays to support incident response activities.

• This position is eligible for a hybrid work arrangement, with in-person work required at least one day a week and at other times based on operational or incident-response needs.

Required Qualifications
Work Experience:

• Two (2) years' experience in information security, computer science, engineering, telecommunications, systems administration, or related technical field. Relevant education may be substituted for experience on a year for year basis.
• One (1) year of progressive work experience in information technology or information security.
• Experience working with networking architectures, topologies, practices, and technologies.
• Experience handling information involving privacy and confidentiality and applying appropriate judgment in its use and disclosure.
• Experience providing technical support or security guidance to customers, users, or stakeholders.

Preferred Qualifications
Education: Bachelor's degree in information security, computer science, engineering, telecommunications, systems administration, or another related technical field.

Certifications/Licenses:

• CompTIA Network+, CompTIA Security+, (ISC)2 SSCP, or EC-Council ECSA certification, or an equivalent certification.
• ITIL Foundations certification or higher.

Work Experience:

• Experience with endpoint security tools.
• Related work experience in a higher education or academic health care organization.
• Experience with SIEM technologies.

Skills

• Problem solving

• Communication

• Organization

• Collaboration

• Attention to detail

• Interpersonal skills

• Time management

• Multitasking

• Customer service

Comprehensive Benefits Package:

Coverage begins on day one for health, dental, and vision insurance and includes health expense accounts with generous employer contributions if the employee participates in a qualifying health plan. Employer-paid life insurance, long-term disability insurance, and various additional voluntary insurance plans are available. Paid time off, including vacation and sick, begins accruing upon hire, plus ten paid holidays. One paid discretionary day is available after six months of employment, and paid time off for bereavement, jury duty, military service, and parental leave is available after 12 months of employment. A retirement program with a generous employer contribution and additional voluntary retirement programs (457 or 403b) are available. https://www.kumc.edu/human-resources/benefits.html

Employee Type:
Regular

Time Type:
Full time

Rate Type:
Salary

Compensation Statement:

The pay range listed for this position is determined by our compensation program using market data and salary benchmarking. A combination of factors is considered in making compensation decisions including, but not limited to, education, experience and training, qualifications relative to the requirements of the position, and funding. At the University of Kansas Medical Center, a reasonable estimate for the starting pay range will be the minimum to midpoint of the posted range, taking into account the combination of factors listed above.

Pay Range: $60,800.00 - $91,200.00

Minimum
$60,800.00

Midpoint
$76,000.00

Maximum
$91,200.00

Application Instructions:
To learn more and apply online, please visit https://kumc.wd5.myworkdayjobs.com/en-US/kumc-jobs/job/Kansas-City-Metro-Area/Information-Security-Analyst-I_JR010619-1 or go to https://careers.kumc.edu/ and search for position number JR010619.

Applications must be submitted directly through the KU Medical Center website to be considered for this position. Any applications submitted via email or this website will NOT be reviewed or considered.

About KU Medical Center:
The University of Kansas Medical Center's mission is to educate exceptional health care professionals through a full range of undergraduate, graduate, professional, postdoctoral and continuing education programs in the schools of Medicine, Nursing and Health Professions. KU Medical Center also advances the health sciences through world-class research programs; provides compassionate and state-of-the-art patient care in an academic medical center environment; and works with communities in every Kansas county to improve the health of Kansans. Learn more at www.kumc.edu.

Benefits:
KUMC offers a range of great benefits that support employees and eligible family members. Our health insurance benefits begin on hire date and KUMC offers other exciting benefits such as paid parental leave, generous employer retirement contributions and other resources to improve health and well-being. For more information, please visit https://www.kumc.edu/human-resources/benefits.html

Equal Employment Opportunity Statement

The University of Kansas Medical Center is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, ethnicity, ancestry, age, protected veteran or disability status, marital status, parental status, or genetic information. http://policy.ku.edu/IOA/nondiscrimination">http://policy.ku.edu/IOA/nondiscrimination

je-805f51e8001e47fc89b2552f4c33246d