IT Security Specialist/ Analyst I

The College of Charleston is hiring an IT Security Specialist/Analyst I to support its information security program. The role monitors and analyzes threats, assists with incident response and vulnerability remediation, conducts security assessments, and maintains security procedures and documentation.

What you'll do:

• Actively monitor reporting systems and operations for security issues including network logs, endpoints, and servers
• Monitor system consoles including but not limited to DLP, SIEM/XDR, anti-virus, patch management, OS,, software inventories and network for potential security threats
• Participate in the active remediation of identified vulnerabilities and incidents
• Conduct initial analysis of suspicious activity, isolate compromised endpoints, and escalate complex threats to the Senior Information Security Analyst following established incident playbooks
• Review security consoles for anomalies or security threats and remediate any issues identified
• Promptly investigate high priority notifications and report findings to the Senior Information Security Analyst
• Assist with routine vulnerability scans, track patch status, and coordinate remediation efforts
• Assist clients with validating their remediation effort by re-scanning and reporting results
• Work closely with IT Enterprise admins on improving and hardening system security posture using security control frameworks
• Participate in external Penetration Testing exercises and remediation efforts
• Assist College and IT project teams with security assessment of their projects
• Collaborate with other IT areas on identifying security concerns, risk and system vulnerabilities (i.e. database managers, system admins and system programmers)

What they're looking for:

• A bachelor's degree in information technology systems, computer science, or related field and experience in information technology systems or related area
• Relevant experience may be substituted for bachelor's degree on a year-for-year basis
• Candidates with an equivalent combination of experience and/or education are encouraged to apply
• Knowledge of security administration for various operating systems and software
• Ability to write detailed technical documentation on security procedures
• Basic analytical and problem solving skills
• Basic knowledge and understanding of information risk concepts and principles as a means of relating business needs and security controls
• Knowledge of Identity Access management
• Knowledge of security frameworks
• Ability to communicate with audiences with varying levels of technical knowledge
• Basic knowledge of project management

Benefits:

• Health, dental, and vision insurance
• Life insurance
• Sick, annual, and parental leave
• Retirement
• Long-term disability
• Paid holidays
• Free CARTA bus service
• Employee Tuition Assistance Program (ETAP)
• Employee Assistance Program (EAP)