Located in a historic neighborhood in the nation's capital, Georgetown offers rigorous academic programs, a global perspective, exciting ways to take advantage of Washington, D.C., and a commitment to social justice. Our community is a tight knit group of remarkable individuals interested in intellectual inquiry and making a difference in the world.
Requirements
Cybersecurity Operations Analyst, University Information Services - Georgetown University
Job Overview
The Cybersecurity Operations Analyst utilizes cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills, incorporating their knowledge to detect, assess, and respond to cybersecurity events and incidents across the Georgetown network. They demonstrate creativity and divergent thinking in relations with engineering methodologies, process, procedures and implementation of tools and processes to overcome operational challenges.
The Cybersecurity Operations Analyst balances a number of different roles, including coding, security tool tuning, and validation with the ability to improve collaboration and expedite the development process as it relates to security operations for both local and cloud environments. They employ a high level of communication skills, both verbal and written, to ascertain and implement functional solutions for the team and the University.
The Cybersecurity Operations Analyst provides technical expertise and guidance in the areas of information security analysis, intrusion detection, incident response, and network security management. They work with systems and network administrators at Georgetown University to ensure that appropriate security levels are maintained. As well, in cooperation with staff and operating within the guidelines of the information security policy and acceptable use policy, they perform security validation and other technical tasks using commercial and publicly available security tools; and they also work with legal counsel, campus police, internal and external auditing and a broad section of the University community on identifying and clarifying the issues related to computer security and risk.
Work Interactions
Reporting to the Director of Information Security Operations, the Cybersecurity Operations Analyst interacts and communicates with Technical staff and IT managers throughout the entire university as well as non-technical administrators, faculty, staff, and students. They have regular contact throughout the university, and nationally and internationally with professionals holding similar positions at other universities, with vendors of security applications and/or devices, and other experts as necessary and appropriate and involving issues that are highly sensitive or confidential. The CSA has no direct reports.
Qualifications
Bachelor's degree or equivalent with relevant coursework in Computer Science, Information Systems or related field(s)
At least 2 years of Cybersecurity Operations Center experience specific to intrusion detection, incident response, threat intelligence, forensics, vulnerability assessment, system audit, and firewall management
Experience with current commercial and open-source security tools, such as Zeek, SIEM, EDR, and SOA
Experience with the following: a) Active Directory, LDAP, Kerberos, and coding/scripting Source control - like Git , Bitbucket, VSTS, etc.; b) Orchestration - Kubernetes , Mesos, Swarm, Hive; and c) Public/Private Cloud - like AWS , Azure , Google Cloud Platform , OpenStack, Workday, Salesforce
Excellent interpersonal, written and oral communication and analytical skills
Deep understanding of Security Architecture, Tool Integrations, REST APIs/SOAP APIs
Knowledge of Networks and Network Protocols - TCP/UDP, DNS, HTTP/HTTPS, SSH, FTP, etc.
Log Management Platforms experience - Splunk, Elasticsearch/Logstash/Kibana - ELK / Elastic Stack
Availability and willingness to work outside the usual business hours of Georgetown University, including on-call responsibilities
Preferred Qualifications
Graduate degree
Experience in security technologies - such as EDR, SIEM, Cisco/PaloAlto Firewalls, VPNs, AV, and IDS/IPS
Experience in a University environment
Work Mode: Telework. Please note that work mode designations are regularly reviewed in order to meet the evolving needs of the University. Such review may necessitate a change to a position's mode of work designation. Complete details about Georgetown University's mode of work designations for staff and AAP positions can be found on the Department of Human Resources Mode of Work Designation .
Current Georgetown Employees:
If you currently work at Georgetown University, please exit this website and login to GMS ( gms.georgetown.edu ) using your Net ID and password. Then select the Career worklet on your GMS Home dashboard to view Jobs at Georgetown.
Submission Guidelines:
Please note that in order to be considered an applicant for any position at Georgetown University you must submit a cover letter and resume for each position of interest for which you believe you are qualified. These documents are not kept on file for future positions.
Need Assistance:
If you are a qualified individual with a disability and need a reasonable accommodation for any part of the application and hiring process, please click here for more information, or contact the Office of Institutional Diversity, Equity, and Affirmative Action (IDEAA) at 202-687-4798 or ideaa@georgetown.edu .
Need some assistance with the application process? Please call 202-687-2500. For more information about the suite of benefits, professional development and community involvement opportunities that make up Georgetown's commitment to its employees, please visit the Georgetown Works website .
EEO Statement:
Georgetown University is an Equal Opportunity/Affirmative Action Employer fully dedicated to achieving a diverse faculty and staff. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, national origin, age, sex (including pregnancy, gender identity and expression, and sexual orientation), disability status, protected veteran status, or any other characteristic protected by law .
Benefits:
Georgetown University offers a comprehensive and competitive benefit package that includes medical, dental, vision, disability and life insurance, retirement savings, tuition assistance, work-life balance benefits, employee discounts and an array of voluntary insurance options. You can learn more about benefits and eligibility on the Department of Human Resources website .
COVID-19 Vaccination Requirements:
The Georgetown University community is committed to our public health approach and the important role that vaccines play in contributing to the safety of our University and our broader communities. Georgetown University requires students, faculty, staff and visitors to be fully vaccinated against COVID-19 and to have received a COVID-19 vaccine booster shot when eligible, or to have an approved medical or religious exemption. This requirement applies to all faculty and staff, including teleworking employees. Complete details and updates can be found in the Coronavirus (COVID-19) Resource Center .