Linux Security Analyst

Research Computing is looking for a skilled, self-motivated Information Security Analyst. This position will work with Research Computing's Information Security Officer to implement and manage vulnerability scanning activities, system policy scanning, and perform auditing of system and application logs for malicious activity, unexpected changes, or violations of policy.

Additional responsibilities include assisting the RC Information Security Officer with Security Program administration, security assessments, risk analysis and reporting. This role will work to enhance Research Computing's overall Information Security Program, primarily focusing on collaboration with the Minnesota Supercomputing Institute to improve program maturity and enhance services to the UMN Research Community.

The successful candidate will be responsible for a mix of day-to-day security operations including the development of monitoring and alerting, and creating automated or manual incident response workflows, analyzing, improving, and responding to vulnerability scan reports, analyzing, improving and responding to audit reports. Frequent collaboration across department units will be required.

Responsibilities:
Security Operations (70%)

• Develop and deliver Vulnerability scanning schedules, reports, and response procedures across targeted Research Computing systems
• Develop System Policy Compliance scanning schedules, reports and response procedures across targeted Research Computing systems
• Monitors systems, networks, databases, and web applications for potential system breaches
• Identifies security risks and exposures, determines the causes of security violations and suggests procedures to stop future incidents and improve security
• Responds to alerts from information security tools
• Collaborates with Research Computing's Information Security Officer, Advanced Systems Operations engineers, and University Information Security to respond to, mitigate, and recover from security incidents

Information Security Program Activities (20%)

• Assist the ISO with Risk Analyses and System Security Reviews
• Assist the ISO with Test of Design & Effectiveness of existing safeguard implementations
• Educates and communicates security requirements and procedures to users
• Recommends changes to enhance systems security and prevent unauthorized access.
• Ensures compliance with regulations, privacy laws and UMN policies

Other Activities (10%)

• Conducts research on security trends, new methods, and techniques used in unauthorized access of data to eliminate the possibility of system breach
• Participate in applicable professional organizations and conferences
• Attend applicable training to stay current with ongoing policy and system updates and for professional development
• Assist Information Security Officer with ad-hoc reporting or other responsibilities as assigned

Required Qualifications:

• BA/BS plus at least two years of relevant experience, or Master's Degree
• Experience in information security and/or IT risk management with a focus on security, performance and reliability
• Demonstrated Experience with Vulnerability Scanning & Reporting Tools (Qualys, Rapid 7, Tenable, etc)
• Demonstrated Experience with Log Aggregating and Analysis Tools (Splunk, Elastic/LogStash, Graylog, etc)
• Proficient with daily Linux systems administration, troubleshooting and operations
• Excellent communication (oral, written, presentation), interpersonal and consultative skills
• Familiarity with standard Information Security Frameworks (e.g. NIST CSF, CIS Controls, HiTrust, OWASP)
• Familiarity with CI/CD lifecycle
• Detail oriented, able to work independently, and prioritize tasks
• Able to work collaboratively in a team environment when required

Preferred Qualifications:

• Familiarity with NIST 800-53 and/or 800-171, and/or HIPAA Security & Privacy Rule
• Familiarity with CIS Security Benchmarks and Controls
• Familiarity with Configuration Management tools such as puppet, ansible or chef
• HPC, Large Systems or research computing experience
• One or more Security Certifications such as Security+, CC, CCSP, CCSK, GSP, CDPSE, etc

Research Computing helps to enable and accelerate compute, data, and spatial research at the University of Minnesota. As a unit of the Research and Innovation Office, Research Computing is the administrative organization that oversees the Minnesota Supercomputing Institute, U-Spatial, and the Data Science Initiative. Research Computing seeks to coordinate its member units to increase the visibility of their respective services, effectively collaborate and partner with all UMN campuses and national computing and IT providers, and provide a seamless user experience to the University's research and scholarly communities. Research Computing covers a broad range of research needs from advanced computing and data storage hardware, to dedicated expertise, software, training, and seed grants.

Pay Range: $70K - $90K; depending on education/qualifications/experience

Time Appointment: 75%-100% Appointment

Position Type: Faculty and P&A Staff

Please visit the Office of Human Resources website for more information regarding benefit eligibility.

The University offers a comprehensive benefits package that includes:

• Competitive wages, paid holidays, and generous time off
• Continuous learning opportunities through professional training and degree-seeking programs supported by the Regents Tuition Benefit Program
• Low-cost medical, dental, and pharmacy plans
• Healthcare and dependent care flexible spending accounts
• University HSA contributions
• Disability and employer-paid life insurance
• Employee wellbeing program
• Excellent retirement plans with employer contribution
• Public Service Loan Forgiveness (PSLF) opportunity
• Financial counseling services
• Employee Assistance Program with eight sessions of counseling at no cost
• Employee Transit Pass with free or reduced rates in the Twin Cities metro area

Applications must be submitted online. To be considered for this position, please click the Apply button and follow the instructions. You will be given the opportunity to complete an online application for the position and attach a cover letter and resume.

Additional documents may be attached after application by accessing your "My Job Applications" page and uploading documents in the "My Cover Letters and Attachments" section.

To request an accommodation during the application process, please e-mail employ@umn.edu or call (612) 624-8647.

The University recognizes and values the importance of diversity and inclusion in enriching the employment experience of its employees and in supporting the academic mission. The University is committed to attracting and retaining employees with varying identities and backgrounds.

The University of Minnesota provides equal access to and opportunity in its programs, facilities, and employment without regard to race, color, creed, religion, national origin, gender, age, marital status, disability, public assistance status, veteran status, sexual orientation, gender identity, or gender expression. To learn more about diversity at the U: http://diversity.umn.edu

Any offer of employment is contingent upon the successful completion of a background check. Our presumption is that prospective employees are eligible to work here. Criminal convictions do not automatically disqualify finalists from employment.

The University of Minnesota, Twin Cities (UMTC)

The University of Minnesota, Twin Cities (UMTC), is among the largest public research universities in the country, offering undergraduate, graduate, and professional students a multitude of opportunities for study and research. Located at the heart of one of the nation's most vibrant, diverse metropolitan communities, students on the campuses in Minneapolis and St. Paul benefit from extensive partnerships with world-renowned health centers, international corporations, government agencies, and arts, nonprofit, and public service organizations.

At the University of Minnesota, we are proud to be recognized by the Star Tribune as a Top Workplace for 2021, as well as by Forbes as Best Employers for Women and one of America's Best Employers (2015, 2018, 2019, 2023), Best Employer for Diversity (2019, 2020), Best Employer for New Grads (2018, 2019), and Best Employer by State (2019, 2022).