Primary Purpose Of Position
The Information Security Administrator (Administrator) is a midlevel position that provides the technical expertise required to implement and manage complex cybersecurity systems lead cybersecurity operations and protect the confidentiality integrity and availability of the universitys technology infrastructure. The Administrator manages a variety of platforms including security incident and event management SIEM applications intrusion detection and prevention systems IDS / IPS endpoint and extended detection and response EDR / XDR systems and network and vulnerability scanning tools. This position plays a critical role in incident management provides technical leadership of response tasks and performs complex technical tasks to ensure that incidents are managed properly. The Administrator coordinates with network system and security staff in other departments and provides technical cybersecurity leadership under the guidance of senior security staff. This position coordinates with service providers and consultants to ensure that the universitys needs are addressed. The Administrator works closely with senior Information Technology Services ITS managers and architects and acts as a consultant in cybersecurityrelated matters. The Administrator reports to the Chief Information Security Officer CISO and is a midlevel member of the Information Technology Services ITS technical staff and security team. The Administrator works with leaders and other staff to ensure a high level of service to faculty staff and students and to ensure that all technology systems are secured and meet compliance requirements.
Minimum Requirements
Masters degree in computer science Information Technology or a related field with one year of experience directly related to the duties of the position or bachelors degree in computer science Information Technology or a related field with two years experience directly related to the duties of the position. Technical knowledge of and experience with network server storage endpoint and cybersecurity systems and related management and monitoring applications. Knowledge of information system network and cybersecurity architecture and integration of disparate technology systems. Significant knowledge of common network protocols such as IP TCP UDP ICMP ARP SNMP DHCP DNS NTP HTTP SSH and RDP . Significant knowledge of technology systems from Microsoft Linux VMware NetApp Palo Alto Extreme Cisco and other leading vendors. Significant knowledge of and experience with firewalls IDS / IPS SIEM EDR / XDR network management systems and network scanning tools. Knowledge of information security standards such as ISO 27002 or NIST SP 800171 and their incorporation into technology systems design. Knowledge of incident response and forensics procedures. Knowledge of change control procedures. Ability to act independently with little or no guidance especially during incident response situations where IT managers or senior staff are unavailable. Demonstrated ability to use effective problemsolving negotiation and decisionmaking skills to influence management and staff as well as internal and external partners. Demonstrated strong customer service orientation experience in partnering with other units and fostering a team spirit within the department. Strong interpersonal and communication skills and the ability to work effectively with a wide range of constituencies in a diverse community and with a commitment to outstanding client service. Demonstrated ability to work collaboratively with ITS staff and university stakeholders of all levels of technical ability.
Preferred Years Experience Skills Training Education
Demonstrated project management experience and excellent analytical and skills. Ability to write scripts to automate processes.
Required Experience:
Unclear Seniority