Information Security Analyst (Information Security Analyst II)

Position Summary San Diego State University is seeking a detail-oriented and collaborative Information Security Analyst to join the Information Technology Security Office (ITSO). In this role, you will help protect the university’s digital environment by strengthening endpoint security, monitoring threats, and supporting compliance efforts. You’ll work closely with campus partners to ensure secure systems that support teaching, research, and student success across the university. Key Responsibilities: Endpoint Security & System Protection Implement, manage, and continuously improve endpoint security controls across university devices. Monitor and strengthen protections such as malware defense, system configurations, and access controls. Partner with IT teams to deploy secure solutions that balance security with operational needs. Vulnerability Management & Compliance Conduct vulnerability scans, assess risks, and coordinate timely remediation efforts. Manage patching processes and ensure systems meet security and compliance standards. Monitor and report on system compliance, identifying and addressing gaps. Security Monitoring & Incident Response Analyze security alerts and logs to detect, investigate, and respond to potential threats. Support incident response efforts, including containment, documentation, and follow-up actions. Help improve response procedures and security playbooks. Reporting, Documentation & Collaboration Develop dashboards and reports to communicate security posture and trends. Maintain documentation to support audit readiness and operational continuity. Provide guidance to campus stakeholders on secure practices and data protection. Governance & Risk Support Contribute to security standards, risk assessments, and compliance initiatives. Support audit processes and ensure alignment with CSU and regulatory requirements. Why Join Us? Mission-driven work – Help safeguard systems that support student learning, research, and innovation. Collaborative culture – Work alongside a supportive IT and campus community. Impact at scale – Protect a large, complex university environment with real-world security challenges. Growth opportunities – Build expertise in cybersecurity, compliance, and emerging technologies. Position Information This is a full-time (1.0 time-base), benefits eligible, permanent/probationary position. This position is designated as exempt under FLSA and is not eligible for overtime compensation. Standard SDSU work hours are Monday – Friday, 8:00 a.m. to 4:30 p.m., but may vary based on operational needs. This position is eligible for telecommuting up to 3 days per week, following a training period during which on-site presence is required. Department Summary The Information Technology Security Office (ITSO), reporting to the Chief Information Officer (CIO), is part of the IT division. ITSO provides campus-wide core technology and security services, collaborating with university departments, external auxiliary organizations, and the CSU Chancellor's Office to support core technology and security services across the campus. The SDSU OneIT Community is vital to the university’s success by delivering core technology services across our campuses, colleges, administrative areas, and auxiliary units. Our mission is to support innovation in teaching, research, and service by strategically developing infrastructure, responsibly managing IT assets, actively engaging with our community, and fostering collaboration. Guided by our Vice President for Information Technology/Chief Information Officer, we uphold SDSU’s commitment to learning, discovery, and engagement, with our core values—service, collaboration, respect, integrity, innovation, and professionalism—permeating every aspect of our work. For more information regarding the Information Technology Security Office, click here . Education and Experience An equivalent to a bachelor's degree in a related field and two years of relevant experience. Additional experience which demonstrates acquired and successfully applied knowledge and abilities shown above may be substituted for the required education on a year-for-year basis. An advanced degree in a related field may be substituted for the required experience on a year-for-year basis. Key Qualifications Experience with Windows endpoint management and automation tools (e.g., scripting, device management platforms, provisioning solutions). Knowledge of Windows endpoint configuration and policy management (e.g., Group Policy or similar tools). Experience supporting Windows system updates, patch management, and endpoint security tools (e.g., antivirus, EDR). Familiarity with Windows-based enterprise identity and access management systems (e.g., Active Directory or similar). Ability to translate technical requirements into actionable security and operational tasks. Working knowledge of common cybersecurity frameworks and standards (e.g., PCI-DSS, CIS Controls, NIST). Strong problem-solving skills with the ability to manage and prioritize multiple technical tasks. Effective communication skills with the ability to collaborate across technical and non-technical teams. Preferred experience supporting Jamf or similar endpoint management platforms and third-party application patching systems. Preferred experience with vulnerability management processes, including validation, remediation coordination, and exception handling. Preferred experience with endpoint security operations, including incident triage, evidence preservation, and ticket/workflow management. Preferred familiarity with endpoint security baselines/benchmarks and applying configuration hardening at scale, along with the ability to report on metrics and communicate findings to varied audiences. Compensation and Benefits San Diego State University offers competitive compensation and a comprehensive benefits package designed to support your well-being and professional growth. Compensation : Step placement will be determined based on relevant qualifications and professional experience, in alignment with the department’s budget and equity guidelines. Initial step placement is not expected to exceed Step 1 ($6,492/month). Salary step placement for internal applicants will follow the CSUEU Collective Bargaining Agreement. CSU Classification Salary Range: $6,492-$9,458 per month (Step 1-Step 20). Future increases, including step advancements, are subject to contract negotiations Full Benefits Package Includes : Generous Time Off : 15 paid holidays, vacation, and sick leave. Retirement : CalPERS pension plan with retiree healthcare, and reciprocal agreements with other California public retirement systems, including the UC. Health Coverage : Medical, dental, and vision options at low or no cost. Education Support : CSU tuition fee waiver for employees and eligible dependents. Optional Offerings : FlexCash, life and disability insurance, legal and pet plans. Campus & Community : Access to the library, campus events, employee groups, and volunteer and social activities. Our benefits are a significant part of total compensation. Learn more at the SDSU Benefits Overview . SDSU Values At SDSU, our diversity gives us power and benefits every single member of our community. Consistent with California law and federal civil rights laws, SDSU provides equal opportunity for all in education and employment. We encourage all members of our community to purposefully learn from one another through open and respectful dialogue and responsible engagement. We strongly preserve the right to free expression and encourage difficult conversations that help lead to improved individual and community learning and cohesion. Principles of Community At San Diego State University, we are a community of diverse individuals who have and represent many perspectives, beliefs, and identities. This diversity lends our community strength, and we commit to creating and sustaining an inclusive and intellectually vibrant environment that benefits all members of our university. SDSU’s Principles of Community is an aspirational statement that is intended to evolve over time. The statement reflects the ideals we are encouraged to uphold in our interactions with one another. Equal Opportunity and Excellence in Education and Employment All university programs and activities are open and available to all regardless of race, sex, color, ethnicity or national origin. Consistent with California law and federal civil rights laws, San Diego State University (SDSU) provides equal opportunity in education and employment without unlawful discrimination or preferential treatment based on race, sex, color, ethnicity, or national origin. Our commitment to equal opportunity means ensuring that every student and employee has access to the resources and support they need to thrive and succeed in a university environment and in their communities. SDSU complies with Title VI of the Civil Rights Act of 1964, Title IX of the Education Amendments of 1972, the Americans with Disabilities Act (ADA), Section 504 of the Rehabilitation Act, the California Equity in Higher Education Act, California’s Proposition 209 (Art. I, Section 31 of the California Constitution), other applicable state and federal anti-discrimination laws, and CSU’s Nondiscrimination Policy. We prohibit discriminatory preferential treatment, segregation based on race or any other protected status, and all forms of discrimination, harassment, and retaliation in all university programs, policies, and practices. SDSU is a diverse community of individuals who represent many perspectives, beliefs and identities, committed to fostering an inclusive, respectful, and intellectually vibrant environment. We cultivate a culture of open dialogue, mutual respect, and belonging to support educational excellence and student success. Through academic programs, student organizations and activities, faculty initiatives, and community partnerships, we encourage meaningful engagement with diverse perspectives. As a higher education institution, we are dedicated to advancing knowledge and empowering individuals to reach their full potential by prioritizing inclusive curriculum development, faculty and staff training, student mentorship, and comprehensive support programs. At SDSU, excellence is built on merit, talent, diversity, accessibility, and equal opportunity for all. Supplemental Information Apply by June 1, 2026, to ensure full consideration. Applications submitted after this date will be reviewed on an as-needed basis, and the position will remain open until filled. The person holding this position is considered a ‘mandated reporter’ under the California Child Abuse and Neglect Reporting Act and is required to comply with the requirements set forth in CSU Executive Order 1083 as a condition of employment. San Diego State University is not a sponsoring agency for staff or management positions (e.g., H-1B visa). Applicants must currently be authorized to work in the United States on a full-time basis. Offers of employment are contingent upon the presentation of documents that demonstrate a person's identity and authorization to work in the United States, which are consistent with the provisions of the Immigration Reform and Control Act. A background check (including a criminal records check) must be completed satisfactorily and is required for employment. SDSU will make a conditional offer of employment, which may be rescinded if the background check reveals disqualifying information, and/or it is discovered that the candidate knowingly withheld or falsified information. Failure to satisfactorily complete the background check may affect the continued employment of a current SDSU employee who was conditionally offered the position. SDSU is a smoke-free campus. For more information, please click here . Reasonable accommodations will be provided for qualified applicants with disabilities who request an accommodation by contacting Livia Peeples at [email protected] .