The Information Security Analyst plays a crucial role in safeguarding the organizations information assets by researching, recommending, and implementing robust security policies, practices, and architectures for both on-premise and public cloud infrastructure.
Key Responsibilities:
1. Security Research and Recommendations: Independently research and provide technical recommendations regarding information security policies, practices, system development, and architecture for both on-premise and public cloud infrastructure.
2. Security Tools and Resources Development: Work autonomously and collaboratively with team members to design, architect, develop, and continuously enhance information security tools and resources.
3. Security Requirements and Compliance: Collaborate with resource owners to determine and establish appropriate security requirements, policies, and practices; interpret and ensure compliance with existing policies and procedures.
4. Incident Investigation and Response: Investigate and respond appropriately to internal and/or external complaints (e.g., scanning, hacking, spamming, harassment, abuse, DMCA notices, and any other incidents that include a cyber element).
5. Forensic Analysis: Develop methodologies and perform forensic and other in-depth analyses of critical central systems for signs of unauthorized activity or abuse.
6. Threat Assessment and Action Planning: Exercise discretion and independent judgment to determine possible threats, assess potential severity, and develop appropriate action plans for addressing identified issues.
7. Staying Current on Security Trends: Stay up-to-date on the latest security techniques, tools, and evolving threats; contribute to periodic security briefings and updates for members of the campus community.
8. Other Duties: Perform other duties as assigned to support the organizations information security goals and objectives.
Requirements:
Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent work experience.
3+ years of experience in information security, with a strong focus on security policy development, threat analysis, and incident response.
In-depth knowledge of information security principles, best practices, and industry standards, such as NIST, ISO 27001, and CIS.
Familiarity with both on-premise and public cloud security architectures, particularly in AWS or Azure.
Experience with security tools and technologies, such as SIEM, IDS/IPS, firewalls, and vulnerability scanners.
Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective mitigation strategies.
Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams and stakeholders.
Ability to work independently and exercise sound judgment in high-pressure situations.
Passion for staying current with the latest developments in information security and a commitment to continuous learning and improvement.
Certifications such as CISSP, CISM, or CompTIA Security+ are highly desirable.
Please submit a resume, cover letter, and names and contact information for three references.
Lafayette is deeply committed to creating a diverse community, one that is responsive inclusive and is supportive of each and all of its faculty, students, and staff. All members of the college community share in the responsibility for creating, maintaining, and developing a learning environment in which difference is valued, equity is sought, and inclusiveness is practiced. All Lafayette operations reflect the colleges commitment to diversity, equity, access, and inclusion (deai) initiatives, and lafayette welcomes applicants from diverse backgrounds.