Note: The job is a remote job and is open to candidates in USA. Law School Admission Council (LSAC) seeks a Senior Cybersecurity Analyst to protect and improve the security of its network, Microsoft cloud environment, and sensitive information. The role leads Microsoft Purview and Azure security, data loss prevention, security monitoring and incident response, compliance activities, and technical leadership within the Cybersecurity team.
Responsibilities
- Improve, manage, and provide direction re: LSAC Security Policies, Procedures, and Best Practices and maintain and enhance the formal Security Systems Program
- Serve as LSAC's subject-matter expert for Microsoft Purview, owning the design, deployment, and ongoing tuning of Data Loss Prevention (DLP) policies across Exchange Online, SharePoint, OneDrive, Teams, endpoints, and Azure data sources
- Develop and maintain LSAC's data classification framework, including sensitive information types, trainable classifiers, and sensitivity labels, to protect test items, candidate personally identifiable information (PII), and other confidential data
- Triage, investigate, and resolve DLP alerts and incidents; tune policies to reduce false positives; and report on data-handling risk trends to IT leadership
- Administer and enhance other Microsoft Purview solutions, such as Information Protection, Insider Risk Management, Data Lifecycle Management, Audit, eDiscovery, and Data Security Posture Management for AI, in support of data governance and compliance
- Secure LSAC's Microsoft Azure environment, including identity and access (Microsoft Entra ID, Conditional Access, Privileged Identity Management), network security, Key Vault, and Microsoft Defender for Cloud recommendations and regulatory compliance reporting
- Integrate Purview, Microsoft Defender, and Azure telemetry with Microsoft Sentinel or LSAC's SIEM to build detections, dashboards, and automated response playbooks
- Lead the development of effective cybersecurity policies to address existing and emerging threats, including AI acceptable-use and data protection policies, data governance, and compliance
- Perform IT security inspections, tests, system-level audits, and reviews of existing IT software, hardware, and cloud services to support the annual reviews that ensure compliance with SOC 2, IT and financial audits, PCI DSS, etc
- Evaluate and recommend new Security products and services (hardware and software)
- Consult on, monitor, and report on security systems such as intrusion prevention and detection systems, VPNs, firewalls, and cloud security controls
- Perform network and system vulnerability scans and penetration testing on workstations, servers, network devices, and other computer systems and work with appropriate groups to close Security gaps
- Develop and support automated tools and queries (e.g., KQL, PowerShell) that analyze security events in access control, audit, and cloud logs to discover patterns and evidence of problems
- Provide consultation and assistance to Infrastructure, Executive Staff, and other departments relating to information, cloud, and systems security
- Maintain a high level of confidentiality in identifying and providing assistance in resolving Security issues
- Monitor the networks and websites for the proper Security procedures, software configuration, and signs of compromise or attempted compromise
- Actively promote and enhance Security Awareness programs to LSAC staff and partnering with the Human Resources Department
- Participate on all Information Security projects and attend meetings to provide input and recommendations on issues that have an impact on LSAC’s Security infrastructure
- Evaluate and recommend solutions to current or potential Security threats as they relate to the data and computing environment
- Participate as a member on the Security Incident Response Team and Test Security Task Force
- Respond to Security incidents providing critical documentation and consultation by preserving all records indicating changes made to access control lists to facilitate investigations, as well as, involvement to the response, root cause analysis, and implementation of a solution
- Provide technical leadership and mentoring to other members of the Cybersecurity team and serve as an escalation point for complex investigations
- Keep abreast of the trends and issues in the industry related to Computer Security
Skills
- A bachelor's degree in Information Systems, Cybersecurity, or a related field
- A minimum of 10 years of IT experience, including more than 5 years in IT security, or an equivalent combination of education, training, and experience is required
- Ability to enhance, comply, and implement the Security Systems Program throughout LSAC with overall responsibility and accountability to meet industry standards and best practices to provide a safe and protective data and systems environment
- Broad working knowledge of Security Program issues and best practices, including system threat vulnerability assessments, system Security requirements/architectures, and Security risk mitigation plans that will enable the IT systems and data information mission to be protected and successful
- Demonstrated hands-on experience designing, deploying, and managing Microsoft Purview in an enterprise Microsoft 365 environment, including DLP policies, sensitivity labels, sensitive information types, and Information Protection
- Proven experience running a DLP program end to end: policy design, phased rollout from simulation mode to enforcement, alert triage, tuning, and user education
- Strong working knowledge of Microsoft Azure security, including Microsoft Entra ID, Conditional Access, Privileged Identity Management, Azure networking, Key Vault, Azure Policy, and Microsoft Defender for Cloud
- Experience with Microsoft Defender XDR (Defender for Endpoint, Office 365, and Cloud Apps) and Microsoft Sentinel or a comparable SIEM; ability to write KQL queries
- Solid experience with establishing and promoting a Security Systems Program and the ability to provide the guidance to raise Security Awareness throughout LSAC
- Knowledge and experience with various network protocols, firewalls, penetration tools, remote access, network operating systems, PC operating systems and vulnerabilities and network management tools
- Experience with security tools and best practices, Windows-based systems, Tenable Nessus, Microsoft Defender, PowerShell scripting, and other technical platforms and administration
- Solid understanding of TCP/IP and application development & security best-practices
- Solid knowledge of authentication systems, including modern authentication, multi-factor authentication, token-based authentication, and digital certificates (PKI)
- Solid knowledge of encryption, including Microsoft Purview Message Encryption, Azure Key Vault key management, and protection of data at rest and in transit
- Excellent written and oral communication skills
- Ability to provide technical leadership, mentor team members, and apply project management skills to lead security initiatives from planning through implementation
- At least 3 years of hands-on experience securing Microsoft Azure and Microsoft 365 environments
- Professional certifications such as Microsoft Certified: Information Security Administrator Associate (SC-401), Azure Security Engineer Associate (SC-500), Cybersecurity Architect Expert (SC-100), CISSP, CISM, or relevant GIAC certifications
Benefits
- Remote or in-office work environment
Company Overview