The Testing and Cyber Defense team within the Office of Cybersecurity is looking for a cybersecurity analyst to help support the team in vulnerability management, security tool support, and penetration testing. Ideal candidates should have strong analytical and customer support skills, an ability to work with a diverse campus population, a desire to solve problems, and a background in network and server administration. The Testing & Cyber Defense team works closely with the Monitoring & Incident Response team to assist with significant cyber investigation events.

The Senior Network Defense Analyst position on the Testing & Cyber Defense team is primarily responsible for managing Cybersecurity services focused on network security, performing penetration testing (network and operating system focused) activities, and backing up other members of the team. The Testing & Cyber Defense team is half of the Cybersecurity Operations area with Monitoring & Incident Response comprising the other half. This position provides technical analysis for pen testing engagements, supports cybersecurity tools and services for both the Office of Cybersecurity itself and our campus IT partners, analyzes vulnerabilities and makes recommendations to remediate them, and assists the Incident Response team with security investigations. The Senior Network Defense Analyst reports to the Associate Director for Cybersecurity Operations, works closely with the Testing & Cyber Defense team lead, and collaborates extensively with team members from all parts of the Office of Cybersecurity.

• 15% Conducts investigations of emerging threats and incorporates improvements into security risk assessments
• 15% Conducts research into ways to reduce risk for emerging technologies and services
• 10% Assists with investigations for major and high-risk security breaches
• 10% Implements necessary technical and policy changes to improve security and reduce risk
• 25% Conducts, reports, and recommends remediation on security risk assessments and testing
• 10% Provides consultation on the implementation of cyberdefense services and tools
• 5% Performs penetration testing engagements with campus departments focusing primarily, but not exclusively, on networks and operating systems
• 5% Identifies and implements improvements for future penetration testing engagements.
• 5% Develop and maintain expertise in penetration testing focusing on networks and operating systems, vulnerability risk assessment/remediation, and service management/support.

Diversity is a source of strength, creativity, and innovation for UW-Madison. We value the contributions of each person and respect the profound ways their identity, culture, background, experience, status, abilities, and opinion enrich the university community. We commit ourselves to the pursuit of excellence in teaching, research, outreach, and diversity as inextricably linked goals.

The University of Wisconsin-Madison fulfills its public mission by creating a welcoming and inclusive community for people from every background - people who as students, faculty, and staff serve Wisconsin and the world.

For more information on diversity and inclusion on campus, please visit: Diversity and Inclusion

Preferred
Bachelor's Degree

Required:
-Experience with networks and network security tools such as Palo Alto Next Generation firewalls, VPN concentrators/clients, load balancers, etc.
-Experience working with the three major operating systems (Windows, macOS, and Linux) and administering at least one of them.
-Experience performing penetration testing engagements including technical analysis and writing findings reports.
-Experience writing technical documentation and reports.
-Experience or training on collecting and reporting on metrics for IT services and tools.

Preferred:
-Experience consulting with both team members and IT professionals across a complex, distributed IT environment to identify needs, evaluate issues, and implement solutions to cybersecurity problems.
-Experience collaborating with a security operations center on alerting, particularly regarding vulnerabilities, play development, and analyst training
-Experience evaluating threat intelligence and vulnerability advisories to identify risk and develop appropriate recommendations for responding to the vulnerability or threat.

Preferred
CISSP - Cert Information Systems Security Prof

Preferred
GPEN - GIAC Penetration Tester Certification or equivalent

Full Time: 100%

This position is eligible for either fully on campus or hybrid work. The candidate selected for this position may work fully on-site or perform a combination of on-site and remote work subject to an approved remote work agreement (RWA) agreement. Remote work requires successful candidates to possess their own high-speed internet and phone to perform the work on a university provided computer. Per University policy, transportation between home and assigned work location is not payable/reimbursable and will be at the expense of the employee.

Ongoing/Renewable

Minimum $70,100 ANNUAL (12 months)
Depending on Qualifications
Starting salary will be based on experience and qualifications. Well qualified applicants can expect to earn between $85,000 - $95,000, with final salary based on experience and qualifications.

Employees in this position can expect to receive benefits such as generous vacation, holidays, and paid time off; competitive insurances and savings accounts; retirement benefits.

Please note that successful applicants must be authorized to work in the United States without need of employer sponsorship, on or before the effective date of appointment. University sponsorship is not available for this position.

This position will have occasional work outside of normal office hours to handle incident response activities.

Click on the "Apply Online" button to start the application process.
You will be prompted to upload the following documents:
Resume
Letter of Qualifications
Applicants should attach a letter of qualifications and resume detailing their training and experience relating to the required and preferred qualifications referenced above. The application reviewers will be relying on written application materials to determine which qualified applicants will advance in the recruitment process.

Charissa Weber
charissa.weber@wisc.edu
608-262-0596
Relay Access (WTRS): 7-1-1. See RELAY_SERVICE for further information.

Cyberdefense Analyst III(IT112)

A06-INFORMATION TECHNOLOGY/CYBERSECURITY/OPERATIONS

Academic Staff-Renewable

289739-AS

The University of Wisconsin-Madison is an Equal Opportunity and Affirmative Action Employer.