Department: Industry and Defense Program Information Technology Center

Campus Location: Wichita, KS - WSU Main Campus

Hire Type: Full Time

Pay: Commensurate with experience

Work Schedule: 8am-5pm, Monday-Friday; additional hours may be requested as needed

Export Compliance Requirement: This position requires access to EAR or ITAR controlled technologies. Applicants are required to be eligible for employment under U.S. export control laws and must meet the requirement of being a “U.S. Citizen”.

Job Story

WSU IDP is currently searching for a Cybersecurity Analyst to assist with NIAR’s Security Helpdesk and Operations Center (SHOC). The SHOC is responsible for monitoring and safeguarding the organization’s systems and data, as well as enforcing cybersecurity industry best practices and compliance with NIST 800-171. The SHOC also plays a support and collaborative role with other WSU InfoSec teams.

As a Cybersecurity Analyst, you will play a crucial role in supporting our cybersecurity efforts. This job offers a unique opportunity to apply and expand your knowledge in a real-world cybersecurity environment. You will work alongside with our Cybersecurity Teams, gaining hands-on experience in a Security Operations Center (SOC) environment and other cybersecurity domains.
This position offers substantial exposure to the ever-evolving cybersecurity sector, and an opportunity to work with different tools, to be creative, and to be part of solutions to safeguard our systems, network, data and infrastructure.

Job Summary

Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.

Essential Functions

Interfaces with user community to understand their security needs and implements procedures to provide accommodations.
Ensures that user community understands and adheres to necessary procedures to maintain security.
Conducts accurate evaluation of the level of security required.
Provides management with status reports and security metrics.
Functions as part of the incident response team

Job Duties

This job provides a comprehensive experience in the day-to-day operations of a SOC, allowing you to develop a solid foundation in cybersecurity practices and methodologies. You will have the opportunity to contribute to critical security functions and gain exposure to a variety of cybersecurity tasks and challenges.

Security Monitoring: Actively monitor security alerts generated by various security tools such as SIEM, IDS, EDR, network devices, and systems. Analyze and investigate alerts to identify potential security incidents.
Incident Response: Collaborate with the SOC and/or Incident Response team to respond promptly to security incidents. This involves containing the incident, eradicating the threat, and implementing measures to prevent future occurrences.
Vulnerability Management: Contribute to vulnerability assessments by identifying and assessing security vulnerabilities in systems and applications. Provide recommendations for remediation and work with teams to implement necessary fixes.
Tool Implementation and Maintenance: Assist in the implementation and maintenance of cybersecurity tools such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems, and endpoint security solutions.
Policy Development: Contribute to the development and improvement of security policies and procedures. Stay informed about industry best practices and ensure compliance with relevant cybersecurity standards.
Threat Intelligence: Stay informed about the latest cybersecurity threats, vulnerabilities, and attack vectors. Contribute to threat intelligence analysis to enhance proactive security measures.
Collaboration: Work collaboratively with other members of the cybersecurity team, IT teams, and relevant stakeholders to address security concerns and implement effective security measures.
Documentation: Maintain detailed documentation of security incidents, investigations, and remediation efforts. This documentation is essential for post-incident analysis and reporting.
Continuous Improvement: Participate in the ongoing improvement of security processes and procedures. Provide insights and suggestions to enhance the overall security posture of the organization

Required Education and Experience:

High school diploma or equivalent

Six (6) years of experience in information security. Every 30 hours of college coursework can be substituted for one (1) year of experience.

Knowledge, Skills and Abilities:

Foundational cybersecurity knowledge, understanding of cybersecurity concepts, protocols, and best practices.
Willing to listen and eager to learn.
Detail oriented and excellent analytical skills.
Self-motivated, proactive, and willing to take on investigations and research.
Effective communication skills
Comfortable asking “who, what, when, where, why, and how”
Problem-solving skills

Preferred Qualifications:

Bachelor’s Degree in Cybersecurity, Information Security, Computer Science, or related field.

Two (2) years of experience in cybersecurity, preferrable in a SOC or as cybersecurity analyst.
Relevant coursework or certifications in cybersecurity (e.g., CompTIA Security+, Network+, etc.)
Knowledge and understanding of security concepts such as Phishing, Incident Response, Threat Analysis, and Cybersecurity Awareness
Experience with Microsoft SharePoint, Project, Excel, PowerPoint and Visio
Adept at writing technical documents
Presentation skills

Physical Requirements:

Ability to communicate with others and accurately exchange information
Ability to operate a computer and other office equipment including but not limited to phone, printers, copiers, and calculators
Ability to remain in a stationary position