Information Security Analyst

Position Title

Information Security Analyst

Position Type

Regular

Hiring Range

$102,800 - $128,560 annually;  Compensation will be based on education, experience, skills relevant to the role, and internal equity.

Pay Frequency

Annual

This position is required to have an on-campus presence in Santa Clara CA

POSITION PURPOSE

The Information Security Analyst is a versatile, hands-on security generalist who strengthens university-wide cybersecurity through process automation, technical risk reviews, security posture monitoring, and multi-platform incident response. Reporting to the Chief Information Security Officer (CISO) within the Information Security Office, this role serves as an adaptable technical and operational partner across the institution.

The Security Operations Analyst reports to the Chief Information Security Officer and is a member of the Information Security Office. This office works with the university community to secure system and network resources, protect the confidentiality of student, faculty, and staff information, and improve the university’s security posture. In conjunction with technical teams, risk management, legal, and other university and external vendors and partners, the Information Security Office works to ensure regulatory compliance, best practices, and secure information handling.

The activities of this position must support the Mission and Goals of the University and Information Services. Demonstrated experience with and a commitment to delivering excellent customer service is required.

This position is not eligible for fully remote work. On-site work in Santa Clara CA on a weekly basis is required.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Campus Engagement & User Risk Advisory (30%)

• Service Desk & Operational Triage: Respond to security requests assigned to the Information Security Office within defined SLAs. Handle routine exception requests and actively identify opportunities to update, streamline, and document standard operating procedures.
• Behavioral Guidance: Translate technical security concepts into practical, clear, and actionable behavioral security advice tailored for non-technical stakeholders.
• Risk Consultations: Meet directly with faculty and staff to conduct approachable, lightweight risk assessments of departmental workflows, software usage, and data handling practices.

Workflow Automation, Scripting, and AI (20%)

• Process Automation: In collaboration with senior team members, design, write, and maintain Python, PowerShell, shell scripts, and AI tools to eliminate manual operational tasks, streamline repetitive security workflows, and improve team efficiency.
• API & System Integrations: Assist in developing, testing, and maintaining RESTful API integrations and webhooks to connect security and infrastructure platforms for improved visibility and automation.

Multi-Platform Incident Response (25%)

• Incident Investigation & Containment: Under the guidance of senior leadership, assist in the technical investigation and containment of information security incidents.
• Cross-Platform Investigation: Utilize SIEM and automated tools as an initial baseline, applying strong analytical judgment to determine next steps when telemetry is incomplete or requires deep-dive investigation.
• Triage: Review alerts and vulnerability reports to determine risk; contact system owners and track remediation.
• Incident Documentation: Prepare clear incident reports detailing timeline, impact, technical findings, and post-incident remediation steps.

Systems Security Reviews (25%)

• Third-Party System Implementations: Partner with IT engineers and system owners during the deployment of new third-party services to ensure baseline security controls and data protection practices are applied prior to launch.
• Compliance: Evaluate technical system configurations, data flows, and infrastructure deployments for compliance against standard regulations such as FERPA, HIPAA, GLBA, PCI, and similar.
• Infrastructure Posture Reviews: Perform routine security evaluations and scans across university systems and identity environments to detect hygiene issues, unneeded privileges, and configuration weaknesses, partnering with technical teams to implement remediation steps.

PROVIDES WORK DIRECTION

This position does not have any direct reports.

GENERAL GUIDELINES

1. Recommends initiatives and implements changes to improve quality and services.

2. Identifies and determines cause of problems; develops and presents recommendations for improvement of established processes and practices.

3. Maintains contact with customers and solicits feedback for improved services.

4. Maximizes productivity through use of appropriate tools; planned training and performance initiatives.

5. Researches and develops resources that create timely and efficient workflow.

6. Prepares progress reports; informs supervisor of project status; and deviation from goals.

7. Ensures completeness, accuracy and timeliness of all operational functions.

8. Prepares and submits reports as requested and required.

9. Develops and implements guidelines to support the functions of the unit.

10. Works under general supervision and in close collaboration with senior analysts, engineers, and the CISO to execute security automation, perform risk reviews, and handle incident response.

11. Consults with senior security leadership on complex architectural decisions, policy exceptions, or high-severity incidents.

12. Builds positive, collaborative relationships across academic and administrative departments, serving as an approachable technical liaison.

13. Prepares and submits technical metrics and routine incident reports as requested.

QUALIFICATIONS

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The items below are representative of the knowledge, skills, abilities, education, and experience required or preferred. This position requires the ability to effectively establish and maintain cooperative working relationships within a diverse multicultural environment.

1. Knowledge, Skills, and Abilities

General

• Knowledge of information technology, infrastructure trends, and information security concepts, with the ability to continually develop new technical knowledge and skills.
• Ability to work in a collaborative environment, as either a member or leader of a project team, to meet deadlines and achieve goals.
• Ability to interact with a diverse workforce to provide excellent customer service.
• Demonstrates high self-motivation, a bias for action, and a passion for continuous improvement.
• Ability to successfully keep track of and manage multiple tasks and project assignments simultaneously.
• Ability to exercise independent judgment and engage in critical thinking and complex problem solving.
• Ability to manage multiple priorities and respond effectively to operational security issues in a dynamic technical environment.
• Ability to explain technical, risk, and automated security concepts to non-experts and diverse audiences.
• Ability to maintain confidentiality and securely manage confidential information.
• Must possess impeccable integrity, executing responsibilities while maintaining the trust and confidence of senior management.
• Appreciation for the University’s mission, vision, values, priorities, procedures, and policies.

Position-Specific

• Proficiency in Python or shell scripting (e.g., Bash) for basic data manipulation, log parsing, or automating repetitive tasks.
• Hands-on experience working with RESTful APIs, webhooks, and standard data exchange formats (e.g., JSON, XML)
• Familiarity with applying CIS Benchmarks or similar security baselines to evaluate system configurations.
• Practical experience with PowerShell and inspecting Active Directory and Group Policy Objects