Salary/Position Classification

• $71,300+ annual, Exempt
• 40 hours per week
• This position will work onsite.

Purpose of Position

The role of the Cybersecurity Analyst is to analyze and respond to cybersecurity threats, ensuring confidentiality, integrity, and availability of electronic information within the University. This involves actively addressing current and anticipated threats, vulnerabilities, and incidents. The analyst will collaborate with other departments and the North Dakota University System to coordinate incident response efforts, evaluate risks, and implement measures to mitigate and remediate cybersecurity threats and vulnerabilities. Furthermore, the Cybersecurity Analyst will contribute to UND's information security awareness and education programs.

Duties & Responsibilities

• Provide Direct Support in the Resolution of IT Security Incidents, Complaints, and Queries
  • Respond to and resolve IT security incidents, complaints, and queries promptly and effectively. 
  • Maintain confidentiality regarding sensitive situations and information. 
  • Review end-point security and intrusion detection systems to identify threats and take necessary actions to remediate them. 
  • Provide technical support for IT security incident response execution. 
  • Develop working relationships with investigating authorities. 
  • Develop a working knowledge of evidence retrieval, documentation, and evidence control, and assist in compliance and enforcement.
  • Review logging to identify and respond to security incidents and maintain a Security Information and Event Management (SIEM) system. 
• Assist in Implementing IT Security Technologies, Assessments, Monitoring, and Improvement Activities 
  • Review sensitive data management logs and assist customers with the disposition of sensitive university data. 
  • Assist in IT security risk assessments and vulnerability management implementation, including conducting vulnerability assessments and penetration testing activities. 
  • Participate in implementing new technologies and techniques with respect to security. 
  • Configure, operate, and update security systems and technologies. 
  • Generate reports to the IT Security Officer and CIO used to present findings, results, and recommendations from threat, vulnerability, penetration testing, and risk assessments of IT systems.
• Support the Microsoft 365 (M365) GCC High Tenant 
  • Monitor the M365 GCC High Tenant for security breaches, suspicious activities, or anomalies. 
  • Identify and assess vulnerabilities within the M365 GCC High Tenant environment through regular scans and analysis. 
  • Stay updated with the latest cybersecurity threats and vulnerabilities relevant to M365 GCC High. Monitor threat intelligence feeds, analyze threat reports, and proactively implement security measures to mitigate emerging risks. 
  • Conduct regular security assessments and audits to evaluate the effectiveness of security controls within the M365 GCC High environment. • Promote cybersecurity awareness among M365 GCC High users. 
  • Collaborate with system architects and administrators to review the security architecture and policies of the M365 GCC High Tenant. 
  • Manage and configure security tools specific to M365 GCC High, such as Microsoft Defender for Identity.
• Assist with Providing Campus Education and Awareness Programs and Initiatives Related to IT Security 
  • Assist in creating and deploying IT security publications, awareness, and education activities. 
  • Provide guidance to schools, departments, and administrative offices in securing their data and information systems. 
  • Assist in maintaining UND’s Information Security website. 
  • Assist with conducting phishing assessments. 
  • Collaborate with the NDUS/CTS Information Security Office on security activities. 
  • Implement Safeguarding UND Initiatives.
• Develop and Enforce IT Security Policies, Standards, Procedures, and Guidelines, While Staying Updated on the Latest Trends and Issues in IT Security 
  • Implement UND IT security policies, standards, and guidelines in consultation with the CIO, IT Security Officer, UND legal counsel, UND records retention officer, NDUS/CTS Information Security Office, and state professional colleagues and constituents. 
  • Implement, test, and evaluate procedures for IT incidents and emergencies, e.g., virus infections, system intrusions, system failures, etc. 
  • Serve as an alternate member of the NDUS Information Security Council (ISC). 
  • Participate in continuing education in IT security, focusing on vulnerability and threat identification and mitigation, incident response, and penetration testing. 
  • Keep abreast of security vulnerabilities, threats, technologies, and practices to mitigate. 
  • Maintain awareness of current trends and issues in IT. 
• Provide Mentoring to Student Employees 
  • Assist student staff with any issues or questions they may have. 
  • Provide mentoring/training to student staff. Provide general oversight of the student staff 

Required Competencies

• Strong communication skills
• Professionalism
• Customer service oriented
• Ability to work under pressure by maintaining efficiency, confidentiality, and composure
• Strong attention to detail
• Strong interpersonal skills and demonstrated excellence in customer service
• Ability to communicate with non-technical and technical users

Minimum Requirements

• Bachelor's Degree in Cybersecurity or other technology-related field
• 1 year of varied information technology experience in computer and network infrastructure, operating systems, application software development, risk management, project management, and providing training
• 1 year of direct experience in information security-related duties, including incident response, SIEM, IDS, and penetration testing
• Experience with analytical reasoning and incident response
• Successful completion of a Criminal History Background Check

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the US and to complete the required employment eligibility verification form upon hire.

This position does not support visa sponsorship for continued employment.

Preferred Qualifications

• Experience in a university setting
• Security or technology industry certifications (e.g., CISSP, SANS GIAC, CompTIA, Certified Ethical Hacker)
• CMMC Certified Professional (CCP)