[Hiring] Senior Cybersecurity Analyst @Law School Admissions Council

Role Description

The Senior Cybersecurity Analyst is integral to protecting, monitoring, and improving the security posture of LSAC's network, Microsoft cloud environment, and intellectual property such as test items, candidate data, and systems data. This role serves as LSAC's subject-matter expert for Microsoft Azure security, Microsoft Purview, and Data Loss Prevention (DLP), leading the design, implementation, and ongoing tuning of the controls that discover, classify, and protect sensitive information across Microsoft 365, Azure, and endpoints.

These duties include:

• Partnering with departments throughout LSAC to raise security awareness and educate all LSAC staff in security best practices.
• Utilizing tools required to monitor, analyze, and respond to security threats and related incidents.
• Maintaining compliance with outside requirements (such as SOC 2, PCI DSS, and financial and IT audits).
• Monitoring and reporting on intrusion prevention systems, cloud security alerts, DLP policy matches, and suspicious network traffic.
• Overseeing firewalls and website penetration testing.
• Ensuring project deliverables follow security guidelines.
• Providing technical leadership, mentoring other team members, and championing best practices and procedures of LSAC's overall Security Systems Program.

Qualifications

• A bachelor's degree in Information Systems, Cybersecurity, or a related field.
• A minimum of 10 years of IT experience, including more than 5 years in IT security, or an equivalent combination of education, training, and experience is required.
• At least 3 years of hands-on experience securing Microsoft Azure and Microsoft 365 environments is strongly preferred.
• Broad working knowledge of Security Program issues and best practices.
• Demonstrated hands-on experience designing, deploying, and managing Microsoft Purview in an enterprise Microsoft 365 environment.
• Proven experience running a DLP program end to end.
• Strong working knowledge of Microsoft Azure security.
• Experience with Microsoft Defender XDR and Microsoft Sentinel or a comparable SIEM.
• Solid experience with establishing and promoting a Security Systems Program.
• Knowledge and experience with various network protocols, firewalls, and penetration tools.
• Experience with security tools and best practices.
• Solid understanding of TCP/IP and application development & security best-practices.
• Professional certifications such as Microsoft Certified: Information Security Administrator Associate, Azure Security Engineer Associate, Cybersecurity Architect Expert, CISSP, CISM, or relevant GIAC certifications are strongly preferred.

Requirements

• Improve, manage, and provide direction regarding LSAC Security Policies, Procedures, and Best Practices.
• Serve as LSAC's subject-matter expert for Microsoft Purview.
• Develop and maintain LSAC's data classification framework.
• Triage, investigate, and resolve DLP alerts and incidents.
• Administer and enhance other Microsoft Purview solutions.
• Secure LSAC's Microsoft Azure environment.
• Integrate Purview, Microsoft Defender, and Azure telemetry with Microsoft Sentinel.
• Lead the development of effective cybersecurity policies.
• Perform IT security inspections, tests, and audits.
• Evaluate and recommend new Security products and services.
• Consult on, monitor, and report on security systems.
• Perform network and system vulnerability scans and penetration testing.
• Develop and support automated tools and queries.
• Provide consultation and assistance to Infrastructure, Executive Staff, and other departments.
• Maintain a high level of confidentiality in identifying and providing assistance in resolving Security issues.
• Monitor the networks and websites for proper Security procedures.
• Actively promote and enhance Security Awareness programs.
• Participate on all Information Security projects.
• Evaluate and recommend solutions to current or potential Security threats.
• Participate as a member on the Security Incident Response Team.
• Respond to Security incidents providing critical documentation and consultation.
• Provide technical leadership and mentoring to other members of the Cybersecurity team.
• Keep abreast of trends and issues in the industry related to Computer Security.

Benefits

• Pay Range for this role is 120,000 to 132,000.

Company Description

At LSAC we foster a culture based on our stated values and actively seek to broaden our pipeline of current and future leaders. We are committed to attracting, retaining, and developing individuals who have a passion for the work they do and the mission of LSAC. We encourage all qualified individuals to apply.