Information Security Analyst at Santa Clara University in Santa Clara, CA

Job description

Position Title: Information Security Analyst Position Type: Regular Hiring Range: $102,800 - $128,560 annually; Compensation will be based on education, experience, skills relevant to the role, and internal equity. Pay Frequency: Annual This position is required to have an on-campus presence in Santa Clara CA POSITION PURPOSE The Information Security Analyst is a versatile, hands-on security generalist who strengthens university-wide cybersecurity through process automation, technical risk reviews, security posture monitoring, and multi-platform incident response. Reporting to the Chief Information Security Officer (CISO) within the Information Security Office, this role serves as an adaptable technical and operational partner across the institution. The Security Operations Analyst reports to the Chief Information Security Officer and is a member of the Information Security Office. This office works with the university community to secure system and network resources, protect the confidentiality of student, faculty, and staff information, and improve the university’s security posture. In conjunction with technical teams, risk management, legal, and other university and external vendors and partners, the Information Security Office works to ensure regulatory compliance, best practices, and secure information handling. The activities of this position must support the Mission and Goals of the University and Information Services. Demonstrated experience with and a commitment to delivering excellent customer service is required. This position is not eligible for fully remote work. On-site work in Santa Clara CA on a weekly basis is required. ESSENTIAL DUTIES AND RESPONSIBILITIES Campus Engagement & User Risk Advisory (30%) Service Desk & Operational Triage: Respond to security requests assigned to the Information Security Office within defined SLAs. Handle routine exception requests and actively identify opportunities to update, streamline, and document standard operating procedures. Behavioral Guidance: Translate technical security concepts into practical, clear, and actionable behavioral security advice tailored for non-technical stakeholders. Risk Consultations: Meet directly with faculty and staff to conduct approachable, lightweight risk assessments of departmental workflows, software usage, and data handling practices. Workflow Automation, Scripting, and AI (20%) Process Automation: In collaboration with senior team members, design, write, and maintain Python, PowerShell, shell scripts, and AI tools to eliminate manual operational tasks, streamline repetitive security workflows, and improve team efficiency. API & System Integrations: Assist in developing, testing, and maintaining RESTful API integrations and webhooks to connect security and infrastructure platforms for improved visibility and automation. Multi-Platform Incident Response (25%) Incident Investigation & Containment: Under the guidance of senior leadership, assist in the technical investigation and containment of information security incidents. Cross-Platform Investigation: Utilize SIEM and automated tools as an initial baseline, applying strong analytical judgment to determine next steps when telemetry is incomplete or requires deep-dive investigation. Triage: Review alerts and vulnerability reports to determine risk; contact system owners and track remediation. Incident Documentation: Prepare clear incident reports detailing timeline, impact, technical findings, and post-incident remediation steps. Systems Security Reviews (25%) Third-Party System Implementations: Partner with IT engineers and system owners during the deployment of new third-party services to ensure baseline security controls and data protection practices are applied prior to launch. Compliance: Evaluate technical system configurations, data flows, and infrastructure deployments for compliance against standard regulations such as FERPA, HIPAA, GLBA, PCI, and similar. Infrastructure Posture Revi