Cybersecurity Monitoring Analyst

Job Summary:

This position seeks an enthusiastic Cybersecurity Monitoring Analyst with a willingness to learn and ability to take initiative and produce results while delivering quality service and effective solutions. This position will report to the Associate Director of Data Security in the School of Medicine and Public Health.

This position assists in providing data security and regulatory compliance for the School of Medicine and Public Health at the University of Wisconsin-Madison. The incumbent will evaluate alerts from multiple data sources, analyze and follow up on alerts, and design and update reports and dashboards to inform priorities. Additionally, this position will help contribute to the information security management program to support the school's mission of teaching and research, consistent with risk tolerance.

A successful candidate will have experience using cybersecurity tools to monitor an environment, as well as project management skills and the ability to document process, procedures, and validation of follow up and remediation. This candidate must also exercise sound judgement in working collaboratively and communicate effectively within an exciting environment in a visible role.

The School of Medicine and Public Health is one of the largest divisions of UW-Madison, employing over 4,000 faculty, staff, and instructors and conducts over $350 million of research annually. The data communication network in the UW-Madison School of Medicine and Public Health is comprised of approximately 10,000 total nodes located in 16 buildings on-campus, as well as another 20 sites off-campus.

Responsibilities:

Assists with monitoring, providing access, and analyzing threats to cyber security data and systems, to ensure the safety and protection of information system assets under close supervision. Assists in providing cybersecurity training.

• 20% Assists with monitoring daily system operations using intrusion detection and prevention systems and assesses findings
• 15% Reports application security concerns and escalates security incidents to senior staff
• 10% Generates notification alerts for compromised assets
• 10% Receives, processes, and implements security change requests
• 15% Conducts vulnerability-scanning analysis and tests security controls
• 10% Assists in facilitating security awareness programs
• 5% Identifies and addresses weaknesses in systems or process and work with the system owner to remediate
• 5% Tracks and prioritizes alerts, vulnerabilities, and cybersecurity related tickets for follow up and remediation
• 5% Designs and regularly updates dashboards and reports to present current cybersecurity posture from a monitoring perspective
• 5% Monitors infrastructure, applications, and network to identify vulnerabilities and prevent cyberattacks

Institutional Statement on Diversity:

Diversity is a source of strength, creativity, and innovation for UW-Madison. We value the contributions of each person and respect the profound ways their identity, culture, background, experience, status, abilities, and opinion enrich the university community. We commit ourselves to the pursuit of excellence in teaching, research, outreach, and diversity as inextricably linked goals.

The University of Wisconsin-Madison fulfills its public mission by creating a welcoming and inclusive community for people from every background - people who as students, faculty, and staff serve Wisconsin and the world.

For more information on diversity and inclusion on campus, please visit: Diversity and Inclusion

Education:

Preferred
Associate's Degree

Qualifications:

Required:
- Working knowledge of cybersecurity industry standards (e.g. HIPAA, NIST, ISO, CIS, etc.) and current IT risks
- Experience using cybersecurity tools to monitor the IT environment
- Excellent communication skills with diverse audiences, both oral and written
- Must hold, or be able to obtain within six months, an industry accepted cybersecurity certification (e.g. GIAC, ISACA, ISC2).
- Proven ability to document process, procedures, and validation of remediation

Preferred:
- 2 or more years' experience with information security
- 2 or more years' experience securing cloud environments
- Demonstrated ability with quantitative analysis and automation, including collecting and analyzing logs from various sources
- Experience designing reports and dashboards and following up on results
- Ability to monitor cybersecurity controls and implement best practices for cloud services and platforms, such as AWS, Azure, or GCP
- Experience using standard industry applications to create or update documents to track detected failures to include validation of mitigation s