Information Security Analyst

$102,800 - $128,560 annually; Compensation will be based on education, experience, skills relevant to the role, and internal equity.

POSITION PURPOSE

The Information Security Analyst is a versatile, hands-on security generalist who strengthens university-wide cybersecurity through process automation, technical risk reviews, security posture monitoring, and multi-platform incident response. Reporting to the Chief Information Security Officer (CISO) within the Information Security Office, this role serves as an adaptable technical and operational partner across the institution.

The Security Operations Analyst reports to the Chief Information Security Officer and is a member of the Information Security Office. This office works with the university community to secure system and network resources, protect the confidentiality of student, faculty, and staff information, and improve the university’s security posture. In conjunction with technical teams, risk management, legal, and other university and external vendors and partners, the Information Security Office works to ensure regulatory compliance, best practices, and secure information handling.

The activities of this position must support the Mission and Goals of the University and Information Services. Demonstrated experience with and a commitment to delivering excellent customer service is required.

This position is not eligible for fully remote work. On-site work in Santa Clara CA on a weekly basis is required.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Campus Engagement & User Risk Advisory (30%)

• Service Desk & Operational Triage: Respond to security requests assigned to the Information Security Office within defined SLAs. Handle routine exception requests and actively identify opportunities to update, streamline, and document standard operating procedures.
• Behavioral Guidance: Translate technical security concepts into practical, clear, and actionable behavioral security advice tailored for non-technical stakeholders.
• Risk Consultations: Meet directly with faculty and staff to conduct approachable, lightweight risk assessments of departmental workflows, software usage, and data handling practices.

Workflow Automation, Scripting, and AI (20%)

• Process Automation: In collaboration with senior team members, design, write, and maintain Python, PowerShell, shell scripts, and AI tools to eliminate manual operational tasks, streamline repetitive security workflows, and improve team efficiency.
• API & System Integrations: Assist in developing, testing, and maintaining RESTful API integrations and webhooks to connect security and infrastructure platforms for improved visibility and automation.

Multi-Platform Incident Response (25%)

• Incident Investigation & Containment: Under the guidance of senior leadership, assist in the technical investigation and containment of information security incidents.
• Cross-Platform Investigation: Utilize SIEM and automated tools as an initial baseline, applying strong analytical judgment to determine next steps when telemetry is incomplete or requires deep-dive investigation.
• Triage: Review alerts and vulnerability reports to determine risk; contact system owners and track remediation.
• Incident Documentation: Prepare clear incident reports detailing timeline, impact, technical findings, and post-incident remediation steps.

Systems Security Reviews (25%)

• Third-Party System Implementations: Partner with IT engineers and system owners during the deployment of new third-party services to ensure baseline security controls and data protection practices are applied prior to launch.
• Compliance: Evaluate technical system configurations, data flows, and infrastructure deployments for compliance against standard regulations such as FERPA, HIPAA, GLBA, PCI, and similar.
• Infrastructure Posture Reviews: Perform routine security evaluations and scans across university systems and identity environments to detect hygiene issues, unneeded privileges, and configuration weaknesses, partnering with technical teams to implement remediation steps.

PROVIDES WORK DIRECTION

This position does not have any direct reports.

GENERAL GUIDELINES

1. Recommends initiatives and implements changes to improve quality and services.

2. Identifies and determines cause of problems; develops and presents recommendations for improvement of established processes and practices.

3. Maintains contact with customers and solicits feedback for improved services.

4. Maximizes productivity through use of appropriate tools; planned training and performance initiatives.

5. Researches and develops resources that create timely and efficient workflow.

6. Prepares progress reports; informs supervisor of project status; and deviation from goals.

7. Ensures completeness, accuracy and timeliness of all operational functions.

8. Prepares and submits reports as requested and required.

9. Develops and implements guidelines to support the functions of the unit.

10. Works under general supervision and in close collaboration with senior analysts, engineers, and the CISO to execute security automation, perform risk reviews, and handle incident response.

11. Consults with senior security leadership on complex architectural decisions, policy exceptions, or high-severity incidents.

12. Builds positive, collaborative relationships across academic and administrative departments, serving as an approachable technical liaison.

13. Prepares and submits technical metrics and routine incident reports as requested.

QUALIFICATIONS

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The items below are representative of the knowledge, skills, abilities, education, and experience required or preferred. This position requires the ability to effectively establish and maintain cooperative working relationships within a diverse multicultural environment.

1. Knowledge, Skills, and Abilities

General

• Knowledge of information technology, infrastructure trends, and information security concepts, with the ability to continually develop new technical knowledge and skills.
• Ability to work in a collaborative environment, as either a member or leader of a project team, to meet deadlines and achieve goals.
• Ability to interact with a diverse workforce to provide excellent customer service.
• Demonstrates high self-motivation, a bias for action, and a passion for continuous improvement.
• Ability to successfully keep track of and manage multiple tasks and project assignments simultaneously.
• Ability to exercise independent judgment and engage in critical thinking and complex problem solving.
• Ability to manage multiple priorities and respond effectively to operational security issues in a dynamic technical environment.
• Ability to explain technical, risk, and automated security concepts to non-experts and diverse audiences.
• Ability to maintain confidentiality and securely manage confidential information.
• Must possess impeccable integrity, executing responsibilities while maintaining the trust and confidence of senior management.
• Appreciation for the University’s mission, vision, values, priorities, procedures, and policies.

Position-Specific

• Proficiency in Python or shell scripting (e.g., Bash) for basic data manipulation, log parsing, or automating repetitive tasks.
• Hands-on experience working with RESTful APIs, webhooks, and standard data exchange formats (e.g., JSON, XML)
• Familiarity with applying CIS Benchmarks or similar security baselines to evaluate system configurations. 
• Practical experience with PowerShell and inspecting Active Directory and Group Policy Objects 
• Familiarity with core security concepts (e.g., common network protocols, operating system security internals, and log analysis across Windows, Linux, and MacOS).
• Basic understanding of common compliance and privacy standards relevant to a university setting (e.g., FERPA, GLBA).

2. Education

• Bachelor’s degree from an accredited institution of higher education required (ideally in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline).
• Security or automation-focused certifications preferred (e.g., CISSP, CISA, Security+, GSEC, or certified Python/Cloud practitioner credentials).

3. Experience

• 6+ years of related technical experience in software development, IT operations, or information security operations or similar.
• Demonstrated experience building programmatic scripts, connecting via APIs, and automating technical workflows.
• Experience working within a Higher Education or highly regulated data environment is preferred.

PHYSICAL DEMANDS

The physical demands described below are representative of those that must be met by an employee to successfully perform the essential functions of this job. In accordance with the Americans with Disabilities Act, as amended, the California Fair Employment & Housing Act, and all other applicable laws, reasonable accommodations are provided for qualified persons with disabilities.

• Considerable time is spent at a desk using a computer terminal.
• Will be required to travel to other buildings on the campus.
• May be required to occasionally travel to remote campuses, vendors, suppliers, or partners.
• May be required to attend conference and training sessions within the Bay Area or in- or out-of-state locations.

WORK ENVIRONMENT

The work environment characteristics described below are representative of those an employee encounters while performing the essential functions of this job.

• Typical office and computer lab environment.
• Mostly indoor office environment with windows.
• Offices with equipment noise.
• Offices with frequent interruptions.

Telecommute

Santa Clara University is registered to do business in the following states: California, Nevada, Oregon, Washington, Arizona, and Illinois. Employees approved to telecommute are required to perform their work within one of these states.

EEO Statement

Equal Opportunity/Notice of Nondiscrimination

Santa Clara University is an equal opportunity employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, ethnicity, national origin, citizenship, ancestry, religion, age, sex, sexual orientation, gender, gender expression, gender identity, marital status, parental status, veteran or military status, physical or mental disability, medical conditions, pregnancy or related conditions, reproductive health decision making, or any other characteristic protected by federal, state, or local laws.  For a complete copy of Santa Clara University’s equal opportunity and nondiscrimination policies, please visit the Office of Equal Opportunity and Title IX website at  https://www.scu.edu/title-ix/. 

Clery Notice of Availability

Santa Clara University annually collects information about campus crimes and other reportable incidents in accordance with the federal Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act. To view the Santa Clara University report, please visit the Campus Safety Services website. To request a paper copy please call Campus Safety at (408) 554-4441. The report includes the type of crime, venue, and number of occurrences.

Americans with Disabilities Act

Consistent with its obligations under the law, Santa Clara University will provide reasonable accommodations to applicants and employees with disabilities.  Applicants who wish to request a reasonable accommodation for any part of the application or hiring process should contact the Department of Human Resources ADA Team at [email protected] or by phone at (408)554-4392. Please note: This contact information is intended for accommodation requests only. Resumes or inquiries about application status sent to this inbox will not be reviewed or forwarded. For resumes or questions regarding application status, please contact [email protected].