Cloud Security Analyst

Provides secondary support to:

Secure the college’s technical environment.

Monitor network traffic patterns to identify malicious traffic.

Investigate security breaches in accordance with established procedures.

Prepare regular reports regarding security activities.

Review user access rights and privileges.

Conduct threat hunting activities under the direction of the Chief Information Security Officer, Cybersecurity & Compliance.

Operate, and help maintain data loss prevention infrastructure and configuration policies.

Operate, and help maintain firewall, endpoint detection and protection, intrusion detection and prevention systems, and cloud security infrastructure and related configurations.

Provides secondary support for the College’s IDaaS infrastructure and services.

Adapts to new procedures and techniques to accommodate a changing environment. Stay up to date with current developments and new cloud functionality/services.

Improves and maintains the College’s security/system architecture:

Operate, and help maintain the security of networking, cloud and computer systems.

Help design the technical infrastructure and contribute to long-term system road-mapping.

Actively participate in key projects and initiatives that align with the Cyber Security and Cloud Computing plans.

Implement and maintain the college’s security architecture patterns for consistency.

Contributes to risk assessments, security audits and audit reviews.

Participate in information risk assessment activities (e.g. by helping to identify security threats and vulnerabilities).

Perform security vulnerability scans, review application and operating system access controls, conduct and/or coordinate penetration testing and review physical security.

Administer security assessments of systems that hold college data to ensure standards compliance as well as ongoing security posture.

Increases the organization’s threat intelligence through involvement in security awareness and training.

Conduct analysis and provide recommendations on security awareness campaigns, emerging threat intelligence, and training initiatives.

Contribute to the design of; installs, configures, tests, and maintains security orchestration workflows.

Validates and monitors the outputs of automation and orchestration tasks and workflows.

Stays up-to-date and applies best security automation and orchestration practices.

Maintains performance of Cybersecurity services and helps troubleshoot any performance issues.

Provides consultation to project teams as required.

Provides training to other resources as required.

Understands and adheres to the ITS Project methodology by meeting deadlines for requirements.

Understands business requirements, and collaborates with other team members and departments.

Provides expertise to non-technical team members.

Participates in gathering technical requirements for new or enhanced functionality.

Participates in project management teams as directed

Penetration Testing

Vulnerability Management

Development methodologies, coding and best practices

Automation and Integrations (Powershell and/or experience with off the shelf SOAR toolkits)

Digital Forensics and Incident Response (DFIR)

Red Team/Blue Teaming

Risk Assessments

Excellence in:

Oral and written communications

People skills - communicating clearly and effectively

Problem solving

An equivalent combination of education and experience may be considered