Security Analyst I

Job Title

Security Analyst I

Agency

Texas A&M University

Department

Technology Services - IT Security & Risk

Proposed Minimum Salary

Commensurate

Job Location

College Station, Texas

Job Type

Staff

Job Description

A Glimpse of the job: 

The Security Analyst I is responsible for helping ensure the security posture of IT Resources at Texas A&M University by supporting the vulnerability management program. The analyst will help identify threats and weaknesses, define appropriate risk remediations and ensure security controls are implemented. The analyst will be responsible for offering support and technical help with application and system assessments, data security and secure SDLC to help build strong application security and defenses. The analyst will help identify top areas of risk and have a role in the security architecture of Texas A&M University.

Essential Duties and Tasks:

Security Analysis

• ​​​Assists in enforcing, auditing, and consulting on the appropriate application of security policies and procedures.

• Assists the administration and monitoring of data security on various platforms, conducts audits, reviews security violation reports, and investigates security exceptions.

• Helps conduct and report on internal investigations for possible security violations.

• Reviews the accuracy of documentation and logs of information security incidents, responses, plans, methods, and procedures.

• Assists the development of risk analysis scenarios and response procedures. 

 

Solutions Engineering

• ​​​Assists in developing and managing data, system, and network security architecture.

• Assists in implementing new technology deployments and integration testing.

• Evaluates security products, services, and procedures to enhance productivity and effectiveness.

• Assists project leaders with developing work plans and time schedules for projects including outlining phases and identifying personnel and computing equipment requirements. 

Strategic Collaboration & Partnerships

• ​​​Assists in collaborating with enterprise stakeholders to coordinate the development of specifications within service-based solutions.

• Serves as a resource for other teams or organizations.

• Advises technical staff, policy administrators, and clients on the integrity of security procedures, systems, and policies in the design of systems and facilities. 

Documentation

• ​​​Helps with the development of standard operating procedures.

• Assists the coordination of some documentation provided to partner support teams, customers, stakeholders, and vendors.

• Assists the creation and maintenance of documentation for technologies, including installation, configuration, and appropriate troubleshooting steps.

Professional Development

• ​​​Participates in training, professional development sessions, and continual and ongoing training and exploration into new technologies.​​  

What you need to know

Salary Range: $49,762 - $65,000 annual*

Special Instructions: A cover letter and resume are strongly recommended. You may upload these in the CV/Resume section.

Other Factors: This role is onsite in College Station, TX

Required Education and Experience:

• Bachelor’s degree or equivalent combination of education and experience.

• Four months (1 semester) of student worker and/or security analysis or development experience.

*Compensation is based on the analyses of the above qualifications during the recruitment process.

Knowledge, Skills, and Abilities:

• Ability to multitask and work cooperatively with others.

• Ability to analyze and solve complex problems.

• Excellent written communication, interpersonal, and organizational skills.

• Knowledge of security best practices and ability to conduct risk assessments, audits, and tests. Knowledge of security tools like SIEMs, firewalls, vulnerability scanners, and intrusion detection systems.

• Ability to identify security incidents, anomalies, and vulnerabilities.

• Understanding of frameworks like ISO 27001, NIST CSF, NIST 800-53 and 800-171, CIS controls, etc.

• Familiarity with regulatory frameworks such as HIPAA, FERPA, GLBA, TAC 202, TGC 2054, etc.

• Scripting experience of some kind (Python, Bash, Powershell, etc).

• Hands-on technical expertise, knowledge of security frameworks and policies, and analytical thinking.

• Soft skills like communication, collaboration, and the ability to translate technical details for non-technical audiences are also key for this role. 

Other Requirements and Factors:

• Ability to maintain the security and integrity of critical infrastructure, which may include communications systems, computer networks and systems, cybersecurity systems, electrical grid, hazardous waste treatment system or water treatment system.

• Hiring restrictions in compliance with System Policy 15.02 Export Controls: Must be a United States citizen, permanent resident, or a person granted asylum or refugee status in accordance with 15 CFR, Part 762; 22 CFR §§122.5, 123.22 and 123.26; and 31 CFR § 501.601.

• This role may require working outside of standard office hours, including evenings, weekends, and holidays, to support the demands of technology services and ensure the seamless operation of essential systems.

• This position is security sensitive.

• This position requires compliance with state and federal laws/codes and Texas A&M University System/TAMU policies, regulations, rules and procedures. All tasks and job responsibilities must be performed safely without injury to self or others in compliance with System and University safety requirements.

Instructions to Applicants: Applications received by Texas A&M University must either have all job application data entered or a resume attached. Failure to provide all job application data or a complete resume could result in an invalid submission and a rejected application. We encourage all applicants to upload a resume or use a LinkedIn profile to pre-populate the online application.

All positions are security-sensitive. Applicants are subject to a criminal history investigation, and employment is contingent upon the institution’s verification of credentials and/or other information required by the institution’s procedures, including the completion of the criminal history check.

Equal Opportunity/Veterans/Disability Employer.