Information Security Analyst (Risk and Incident Response)

Position Overview

The Information Security Analyst for Risk and Incident Response (Analyst) provides technical expertise in support of Butler Universitys information security program and serves as a primary technical resource for cybersecurity operations related to vulnerability management incident response and risk assessment. Reporting to the Information Security Manager this position is responsible for the day-to-day administration of security technologies investigation of cybersecurity events and implementation of security controls that protect the universitys information assets technology systems and business operations.

Working closely with the Information Security Manager IT teams and Butlers managed security service providers the Analyst identifies assesses and helps remediate cybersecurity risks through vulnerability management security monitoring incident response and technical security assessments. The position also partners with technical staff to integrate security best practices into the design implementation and ongoing operation of university technology services while contributing to the continuous improvement of Butlers overall cybersecurity program.

Butler University will not provide sponsorship for this position. This position requires the successful candidate to reside in the Indianapolis area and work on-site.

Responsibilities

• Administer and continuously improve Butler Universitys vulnerability management program including identification prioritization tracking and remediation of security vulnerabilities.
• Serve as the primary technical lead for the investigation analysis containment and recovery of cybersecurity incidents coordinating response activities with internal stakeholders and external partners as appropriate.
• Manage the day-to-day operational relationship with Butlers managed detection and response (MDR) provider ensuring timely investigation response escalation and resolution of security events and recommended actions.
• Administer maintain and optimize Butlers security technologies including endpoint protection (EDR) endpoint privilege management (EPM) email security data loss prevention (DLP) and other security platforms as assigned.
• Monitor the health effectiveness and configuration of security tools ensuring they remain properly configured updated and aligned with industry best practices.
• Conduct technical security assessments of systems applications networks and cloud services to identify security risks and recommend appropriate mitigation strategies.
• Partner with IT infrastructure applications and project teams to integrate security requirements and best practices into the design implementation and operation of university technology services.
• Develop and maintain incident response procedures technical documentation operational runbooks and security standards related to assigned responsibilities.
• Analyze emerging threats vulnerabilities and security trends recommending improvements to strengthen Butler Universitys overall security posture.
• Participate in third-party security assessments technology evaluations and other risk management activities by providing technical expertise and security recommendations.
• Support security awareness campus outreach and education initiatives by providing technical guidance developing content and assisting with incident communications when appropriate.
• Perform additional duties as assigned.
  

Required Qualifications

• Bachelors degree in Cybersecurity Information Technology Computer Science or a related field; or an equivalent combination of education and relevant professional experience.
• Three (3) years of progressively responsible experience in information security cybersecurity operations systems administration network administration or a closely related technical field.
• Demonstrated experience investigating security events responding to cybersecurity incidents or administering enterprise security technologies.
• Experience performing vulnerability management security assessments or technical risk analysis in an enterprise environment.
• Working knowledge of information security principles including network security endpoint security operating systems cloud technologies and common cybersecurity frameworks and best practices.
• Experience administering or supporting enterprise security technologies such as endpoint detection and response (EDR/XDR) endpoint privilege management email security vulnerability management SIEM or related platforms.
• Demonstrated analytical problem-solving and troubleshooting skills with the ability to prioritize competing operational demands.
• Strong written and verbal communication skills with the ability to communicate technical concepts to both technical and non-technical audiences.
  

Preferred Qualifications

• Bachelors degree in Cybersecurity Information Technology Computer Science or a related discipline.
• Professional cybersecurity certification(s) such as CISSP GSEC Security CySA GCIH GCIA or equivalent.
• Experience administering Cortex XDR BeyondTrust Endpoint Privilege Management (EPM) Proofpoint Palo Alto Networks security products or comparable enterprise security platforms.
• Experience working with managed detection and response (MDR) managed security service providers (MSSPs) or security operations centers (SOCs).
• Experience conducting digital forensics malware analysis threat hunting or incident response in a complex enterprise environment.
• Experience performing third-party/vendor security assessments and technical risk evaluations.
• Experience in higher education healthcare government or another highly regulated environment.
• Familiarity with security and compliance frameworks such as NIST Cybersecurity Framework (CSF) CIS Critical Security Controls ISO 27001 or EDUCAUSE HECVAT.
• Experience with scripting or automation using PowerShell Python or similar languages to improve security operations.
  

BU Benefits and Perks

Please check out Butlers Total Rewards website to learn more about our benefit offerings which include:

Paid Time Off and Holidays

• 20 days of paid time off (vacation and PTO days) per fiscal year
• 8 paid holidays
• In addition a paid Winter Break between Christmas Eve and New Years Day
• Paid Parental Leave (after 1 year of full-time employment)

Health

• Comprehensive medical dental and vision plans including disability and life insurance programs

Retirement

• 10% employer contribution after 1 year of full-time employment

Tuition Assistance

• Remission of tuition for classes taken at Butler for employees spouses and dependent children
• Eligibility after 9 months of full-time employment
• Employees & spouses undergraduate/graduate degrees
• Dependents (under age 26) undergraduate degree
• Covers tuition only
• Tuition Exchange Program for Dependents at participating institutions

Butler Facilities Access Discounts and Perks

• Access to Butlers on-site fitness facility and libraries for full-time staff and faculty
• LinkedIn Learning Courses
• Free premium subscription to the Calm App
• Free subscription to the WSJ The Economist and NYT
• Discount at the College Bookstore
• Discount on select Athletic and Arts/Event Center Performances