Information Security Analyst III

SNHU Careers

. Serve as senior lead and escalation point for the Security Operations Center team .

Posted 10/7/2026full-timeRemote • United StatesMid-LevelSenior💰 $106,684 - $170,727 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity operations, incident response, and threat analysis, with a strong focus on developing and implementing security strategies and automation tools. Proficient in monitoring complex technology ecosystems and collaborating across teams to mitigate security risks.

Highest-signal resume keywords

Cybersecurity Operations Center ExperienceIncident Response ManagementSecurity Tools ImplementationSIEM Development and ManagementProfessional Certifications (CISSP, CISM, CySA+)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseThreat AnalysisMalware RemediationForensic AnalysisLog Data AnalysisSecurity Automation ScriptingVulnerability AssessmentNetwork Traffic AnalysisDigital Evidence AnalysisAlert Tuning

Soft Skills

Cross-Functional CollaborationStakeholder CommunicationCustomer Support

Tools & Technologies

SplunkCriblMicrosoft Defender XDRTenableEDR ToolsAzure Cloud Resources

Certifications & Qualifications

CISSPCISMCISACompTIA CySA+Security+Network+Microsoft AZ-900SC-100SC-200GIAC

Industry Keywords

Information SecurityCybersecurityIncident Response PlanThreat IntelligenceVulnerability RemediationSecurity Operations CenterData AnalyticsInformation AssuranceEnterprise Security MonitoringCompliance Standards

Tech Stack

Tools & technologies

AzureCloudCyber SecurityFirewallsLinuxSplunk

About the role

Key responsibilities & impact

Serve as senior lead and escalation point for the Security Operations Center team
Monitor a large, complex enterprise technology ecosystem
Detect, analyze, investigate, and respond to information security events and incidents
Coordinate incidents according to SNHU's Information Security Incident Response Plan
Lead investigations of complex or high-severity threats and incidents
Define and authorize incident containment and eradication activities, including endpoint isolation, malware remediation, forensic analysis, malware analysis, interviews, and network traffic analysis
Collaborate cross-functionally across ITS and SNHU business units on triage, containment, remediation, and technical implementations
Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, timelines, and attack vectors
Develop SIEM alerts, reports, and dashboards
Develop and maintain monitoring content for academic integrity investigations, financial aid fraud, and system/network administration
Analyze, implement, and approve tuning of alert content and security tools
Monitor emerging threat intelligence
Serve as Security Operations technical lead for ITS and enterprise-wide projects
Develop strategies and solutions to remediate or mitigate security risks
Identify, prioritize, and onboard relevant log data
Develop and implement logging baselines across operating systems, applications, networks, cloud resources, and security tools
Develop and implement log data pipelines to meet retention requirements and improve SIEM efficiency
Implement, configure, deploy, and manage security operations tools including Splunk, Cribl, Halcyon, Microsoft Defender XDR, and Tenable
Develop and maintain automation scripts and tools
Enforce vulnerability remediation compliance standards
Review false-positive detections
Perform software vulnerability risk analyses and prioritize remediation
Provide technical vulnerability remediation assistance
Report Security Operations metrics to management
Document SOPs, incidents, and incident actions
Communicate with stakeholders at all organizational levels in non-technical language
Provide customer support and escalate potential issues appropriately
Perform other assigned duties

Requirements

What you’ll need

5+ years of relevant or specific experience in cybersecurity
4+ years working in a security operations center, cybersecurity operations center, or cybersecurity incident response team
Minimum 1 year working at a mid to senior level in this capacity
Bachelor's degree in cybersecurity, information technology, data analytics, information assurance, computer science, or related field
Equivalent experience in lieu of degree acceptable
Professional certifications such as ISC2 CISSP, ISACA CISM or CISA, CompTIA CySA+, Security+, Network+, Microsoft AZ-900, SC-100, SC-200, SANS GIAC certifications, or EC Council CEH, CPENT, and CIH
Experience collecting, organizing, and analyzing data from firewalls, vulnerability scanners, Windows/Linux operating systems, software application logs, Azure cloud resources, email platforms, EDR tools, and other enterprise security monitoring platforms
Experience implementing, writing, deploying, and maintaining scripts for security operations automation
Must reside in and work from one of the approved states
Reliable internet connection and dedicated, properly equipped workspace free of distractions
Ability to work extended hours and/or non-business hours during crisis situations and contingency operations

Benefits

Comp & perks

High-quality, low-deductible medical insurance
Low to no-cost dental and vision plans
5 weeks of paid time off
Almost a dozen paid holidays
Employer-funded retirement
Free tuition program
Parental leave
Mental health and wellbeing resources
Remote work from an approved state
Reliable internet connection and dedicated, properly equipped workspace required for remote employees