[Hiring] Senior Cybersecurity Analyst @Law School Admission Council

Role Description

The Senior Cybersecurity Analyst is integral to protecting, monitoring, and improving the security posture of LSAC's network, Microsoft cloud environment, and intellectual property such as test items, candidate data, and systems data. This role serves as LSAC's subject-matter expert for Microsoft Azure security, Microsoft Purview, and Data Loss Prevention (DLP), leading the design, implementation, and ongoing tuning of the controls that discover, classify, and protect sensitive information across Microsoft 365, Azure, and endpoints.

• Partner with departments throughout LSAC to raise security awareness and educate all LSAC staff in security best practices.
• Utilize tools required to monitor, analyze, and respond to security threats and related incidents.
• Maintain compliance with outside requirements (such as SOC 2, PCI DSS, and financial and IT audits).
• Monitor and report on intrusion prevention systems, cloud security alerts, DLP policy matches, and suspicious network traffic.
• Oversee firewalls and website penetration testing.
• Ensure project deliverables follow security guidelines.
• Provide technical leadership, mentor other team members, and champion best practices and procedures of LSAC's overall Security Systems Program.

Qualifications

• A bachelor's degree in Information Systems, Cybersecurity, or a related field.
• A minimum of 10 years of IT experience, including more than 5 years in IT security, or an equivalent combination of education, training, and experience is required.
• At least 3 years of hands-on experience securing Microsoft Azure and Microsoft 365 environments is strongly preferred.
• Broad working knowledge of Security Program issues and best practices.
• Demonstrated hands-on experience designing, deploying, and managing Microsoft Purview in an enterprise Microsoft 365 environment.
• Proven experience running a DLP program end to end.
• Strong working knowledge of Microsoft Azure security.
• Experience with Microsoft Defender XDR and Microsoft Sentinel or a comparable SIEM.
• Solid experience with establishing and promoting a Security Systems Program.
• Knowledge and experience with various network protocols, firewalls, and vulnerabilities.
• Experience with security tools and best practices.
• Solid understanding of TCP/IP and application development & security best-practices.
• Professional certifications such as Microsoft Certified: Information Security Administrator Associate, Azure Security Engineer Associate, Cybersecurity Architect Expert, CISSP, CISM, or relevant GIAC certifications are strongly preferred.

Requirements

• Improve, manage, and provide direction regarding LSAC Security Policies, Procedures, and Best Practices.
• Serve as LSAC's subject-matter expert for Microsoft Purview.
• Develop and maintain LSAC's data classification framework.
• Triage, investigate, and resolve DLP alerts and incidents.
• Administer and enhance other Microsoft Purview solutions.
• Secure LSAC's Microsoft Azure environment.
• Integrate Purview, Microsoft Defender, and Azure telemetry with Microsoft Sentinel.
• Lead the development of effective cybersecurity policies.
• Perform IT security inspections, tests, and audits.
• Evaluate and recommend new Security products and services.
• Consult on, monitor, and report on security systems.
• Perform network and system vulnerability scans and penetration testing.
• Develop and support automated tools and queries.
• Provide consultation and assistance to various departments.
• Maintain a high level of confidentiality in resolving Security issues.
• Monitor networks and websites for proper Security procedures.
• Actively promote and enhance Security Awareness programs.
• Participate on all Information Security projects.
• Evaluate and recommend solutions to current or potential Security threats.
• Participate as a member of the Security Incident Response Team.
• Respond to Security incidents providing critical documentation.
• Provide technical leadership and mentoring to other members of the Cybersecurity team.
• Keep abreast of trends and issues in the industry related to Computer Security.

Benefits

• Pay Range for this role is 120,000 to 132,000.
• Standard business hours are Monday-Friday, 8:30 a.m. - 4:45 p.m. ET.
• This job operates in a remote and professional office environment.
• No travel required for this position.