Senior IT Security Analyst

If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career.

Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.

The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.

At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:
 

Pay Range: $116,000.00 - $174,100.00

Job Description

The Senior IT Security Analyst uses their knowledge of current security methods and standards to gather operational information, assess and analyze tools, systems, and processes in defense of applications, systems, and networks, and collaborate with Infrastructure and business teams. The Senior IT Security Analyst is a lead support role for the IT Security team. They will provide mentorship, administrative service and support for monitoring systems, security breaches, providing investigative analysis and supporting incident response plans, security awareness, risk assessments, document review, vendor risk, vulnerability management and threat hunting. They will also engage in the support of other security focused tools and services and other duties as assigned. In addition, they may be asked to assist with risk assessments, forensics analysis, data collection, user training and other security related tasks.

Essential Functions and Responsibilities:

• Functions as a senior lead IT Security Analyst in one or more of the following: penetration testing, incident handling/digital forensics, continuous monitoring, intrusion detection/prevention), auditing, risk analysis, compliance, security awareness, threat hunting, vendor risk analysis and identity and access efforts.

• Functions in abstract, conceptual, and architectural work as in granular technical implementation and configuration work.

• Supports the creation of tools, processes, and communications that support information security initiatives. Participates in the development of security policies, standards, and procedures.

• Develops and maintains a risk mitigation strategy for the organization that includes a determination of inherent risk, residual risk, and risk tolerance.

• Develops and applies policies, standards, and procedures.

• Analyzes phishing emails utilizing industry standard tools.

• Monitors Endpoint Security utilizing tools such as DLP, HIPS, Client Proxy, EPP, IPS/IDS and local firewalls to establish a baseline and identify anomalous behavior. Understands data encryption strategies. Strives for optimal policy of balance in security and performance.

• Participates in tactical projects as they arise to clarify and responds to identified security risks across different technical domains. Assists in project testing and technical documentation.

• Executes established security practices with consistency and discipline. Monitors alerts for security incidents and escalate, as needed. Process large quantities of data based on significance.

• Collaborates with engineers to support standardized practices and follow routine processes to promote secure systems. Recommends new tools for penetration testing, assessment, and secure product validation.

• Identifies and creates process improvements.

• Processes service request tickets efficiently and reliably.

• Participates in Correction of Errors (CoE), often with members of other teams.

• Participates with incident response activities.

• Participates in risk assessment activities.

• Monitors and tests fixes and patches to ensure vulnerabilities have been appropriately mitigated.

• Continuously mon