Number of Vacancies: 1

Area of Consideration: Open to the Public

Position Status: Full-Time, Regular

Pay Plan, Series & Grade: DS0095/9

Salary Range: up to $76,057

Closing Date: Open Until Filled

Location: 4200 Connecticut Ave, Washington, DC 20008

Brief Description of Duties

The University of the District of Columbia (UDC) is looking for a Junior Security Analyst that will play a key role within the Information Security team to help protect UDC’s Data and Information Systems from cyber threats. Responsibility involves identifying vulnerabilities, implementing security measures, and responding to incidents, ensuring compliance with security policies and industry standards.

The Junior Security Analyst will periodically evaluate the security protocols that ensure the secure transmission and exchange of data across UDC networks. Collaborate with the different teams to maintain Zero Trust principle across network, cloud, and application environments, ensuring that the “least privilege” model enforced consistently.

Essential Duties and Responsibilities

• Security Risk Assessment and Mitigation:
  • Identify and assess potential security risks and vulnerabilities within the UDC's IT infrastructure.
  • Help develop and implement security policies, procedures, and controls to mitigate identified risks.
  • Have experience with security audits and penetration testing to evaluate the effectiveness of security measures.

• Security Monitoring and Incident Response:
  • Monitor network traffic, systems, and applications for suspicious activity and potential security breaches.
  • Checking the network traffic thoroughly to identify potential threats and responding to the risks accordingly.
  • Investigate security incidents, identify root causes, and implement corrective actions.
  • Develop and maintain incident response plans and procedures.
  • Investigate and analyze security events, including threat hunting and forensic analysis, using XDR solutions and other security monitoring tools.
• Security Operations and Vulnerability Management:
  • Support the vulnerability management program, ensure that security vulnerabilities identified, prioritized, and mitigated according to established SLA with IT teams.
  •  Conduct vulnerability scans of all UDC endpoints and set up mitigation plan to address any risk found.
  • Work with different IT teams to address issues with MFA and ensure that it is functional across all platforms.

• Security System Implementation and Maintenance:
  • Install, configure, and maintain security tools and technologies, such as firewalls, intrusion detection/prevention systems, and anti-malware software.
  • Ensure that security systems are up to date with the latest security patches and updates.
  • Configure and manage access control systems to restrict unauthorized access to sensitive data and systems.

• Security Awareness and Training:
  • Educate employees about security risks, threats, and best practices.
• Compliance and Standards:
  • Ensure that the university's IT security practices comply with relevant federal, state, and local laws such as Family Educational Rights and Privacy Act (FERPA), Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA), Payment Card Industry Data Security Standard (PCI DSS), and General Data Protection Regulation (GDPR).
  • Stay up to date on the latest security threats, vulnerabilities, and best practices.
  • Develop and maintain documentation for security policies, procedures, and incident response plans.
  • Collaborate with other IT staff and departments to ensure effective security measures.
  • Research and analyze new security technologies and tools.

• A minimum of 2 years of hands-on experience in cybersecurity roles, with a focus on security operations, incident response, and vulnerability management.
• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 2 years’ experience working with XDR, Cloud Security (AWS, Azure, or GCP), and vulnerability management tools.
• 2 years’ experience in network security, endpoint protection, threat intelligence, and incident response methodologies.
• Hands-on experience with SIEM platforms, vulnerabilities scanning tools, Active Directory (AD) and Entra ID auditing tools, and cloud security posture management.

Information to Applicant

Collective Bargaining Unit (Union): This position is part of the collective bargaining unit.  

Employment Benefits: Selectee will be eligible for health and life insurance, annual (vacation) and sick leave and will be covered under the University of the District of Columbia' s retirement plan (TIAA).

Equal Opportunity Employer: The District of Columbia Government is an Equal Opportunity Employer. All qualified candidates will receive consideration without regard to race, color, religion, national origin, sex, age, marital status, personal appearance, sexual orientation, family responsibilities, matriculation, physical handicap, or political affiliation.

Notice of Non-Discrimination: In accordance with the D.C. Human Rights Act of 1977, as amended, D.C. Official Code, Section 2-1401.01 et. seq., (Act) the University of the District of Columbia does not discriminate on the basis of actual or perceived actual race, color, religion, national origin, sex, age, disability, sexual orientation, gender identity or expression, family responsibilities, matriculation, political affiliation, marital status, personal appearance, genetic information, familial status, source of income, status as a victim of an intrafamily offense, place of residence or business,  or status as a covered veteran, as provided for and to the extent required by District and Federal statutes and regulations. Sexual harassment is a form of sex discrimination which is also prohibited by the Act.  In addition, harassment based on any of the above protected categories is prohibited by the Act.  Discrimination in violation of the Act will not be tolerated.  Violators will be subject to disciplinary action.

Veterans Preference:  Applicants claiming veterans preference must submit official proof at the time of application.

Visa Sponsorship: At this time, the University of the District of Columbia does not provide sponsorship for visas (e.g. H-1B). This position is also ineligible for Optional Practical Training (OPT).

Residency Preference: A person applying for a position who is a bona fide District resident at the time of application for the position, may be awarded a 10-point residency preference over non-District applicants, unless the person declines the preference points. If selected, the person shall be required to present no less than 8 proofs of bona fide District residency on or before the effective date of the appointment and maintain such residency for 7 consecutive years from the effective date of the appointment. Failure to maintain bona fide District residency for the 7-year period will result in forfeiture of employment.

Drug-Free Workplace: Pursuant to the requirements of the Drug-Free Workplace Act of 1988, the individual selected to fill this position will, as a condition of employment, be required to notify his/her immediate supervisor, in writing, not later than five (5) days after conviction of any criminal drug statute occurring in the workplace.

Background Investigation: Employment with the University of the District of Columbia is contingent upon a satisfactory background investigation.  The determination of a "satisfactory background investigation" is made at the sole discretion of the University of the District of Columbia.  The University may refuse to hire a finalist, rescind an offer of employment to a finalist or review and may terminate the employment of a current employee based on the results of a background investigation.

Disposition of Resume: Resumes received outside the area of consideration and/or after the closing date will not be given consideration. You must resubmit your resume to receive consideration for any subsequent advertised position vacancies. For the purpose of employment, resumes are not considered job applications. Therefore, if selected for employment a UDC application will be required.

Job Offers: Official Job Offers are made by the University of the District of Columbia, Office of Human Resources only.

Contact Information:  All inquiries related to employment and job applications should be directed to UDC Office of Human Resources at (202) 274-5380.

The University of the District of Columbia is an Equal Opportunity/Affirmative Action institution. Minorities, women, veterans and persons with disabilities are encouraged to apply. For a full version of the University’s EO Policy Statement, please visit: https://www.udc.edu/human-resources/equal-opportunity/ .