The IT Analyst III - Security Analyst reports to the Project Manager for Security. This individual  supports cybersecurity operations across LSUHS clinical, academic, research, and administrative environments. Responsibilities include monitoring and analyzing security events; supporting incident response, vulnerability management, identity and access management, endpoint security, security awareness, governance, risk, and compliance activities; implementing and monitoring security controls; performing security assessments; coordinating remediation with system owners; and maintaining complete, auditable documentation.

The incumbent will maintain a customer-focused approach by promptly acknowledging and responding to service needs, communicating effectively with both technical and non-technical stakeholders, safeguarding sensitive information, and coordinating security activities with the Service Desk, Infrastructure, Networking, Application Teams, Research Security, system owners, and third-party service providers.

Normal work hours are Monday through Friday from 8:00 AM to 4:30 PM; additional hours may be required.

Regular attendance is required to perform the functions of this position.

Essential Position Functions & Duties

35%  Security Operations and Incident Response

• Monitor, triage, analyze, document, and escalate security alerts and operational security events using enterprise security platforms.
• Perform investigations related to reported or suspected incidents in accordance with Incident Response Protocols, including evidence collection, log analysis, containment support, recovery support, and after-action documentation.
• Monitor SIEM, endpoint, identity, cloud, and system logs; support security control implementation, tuning, and continuous improvement.
• Coordinate security activities with Service Desk, Infrastructure, Networking, Application Teams, Research Security, system owners, and external response partners.
• Available on call outside of normal business hours for security emergencies and scheduled maintenance as needed.

25%  Vulnerability Management and Security Assessments

• Perform or coordinate internal, external, endpoint, server, application, and cloud vulnerability assessments using approved tools.
• Analyze and prioritize findings based on severity, exploitability, asset criticality, exposure, and business impact.
• Track affected assets, responsible owners, remediation target dates, status, approved exceptions, and evidence of closure.
• Validate corrective actions through rescanning, control testing, or review of supporting evidence, and prepare operational and executive remediation reports.

15%  Identity, Access, and Endpoint Security

• Support Microsoft Entra ID identity security controls, including authentication methods, multifactor authentication, Conditional Access, risky sign-in review, access reviews, account lifecycle controls, and role governance.
• Support passwordless authentication initiatives, including passkeys or FIDO2 and Windows Hello for Business.
• Support Microsoft Intune security configurations, device compliance, security baselines, endpoint remediation, and Microsoft Defender investigations.

15%  Governance, Risk, Compliance, and Documentation

• Develop and maintain information security policies, procedures, standards, playbooks, assessment records, and technical documentation.
• Perform or support security risk assessments, third-party security reviews, control testing, audit response, and remediation tracking.
• Support compliance activities involving HIPAA, FERPA, NIST, CIS Controls, LSU policies, contractual obligations, and other applicable requirements.
• Track policy exceptions, audit findings, corrective actions, approvals, review dates, and closure evidence.

5% Security Awareness

• Support security awareness initiatives, phishing simulation campaigns, user follow-up, metrics, reporting, and targeted education improvements.

Non-Essential Position Functions & Duties

5% Marginal Functions

• Performs other related duties and responsibilities as assigned.

The applicant must meet the following:

• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related field.
• Preferred: Master's Degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related field.
• Three years of progressively responsible experience in information technology, cybersecurity, systems administration, security operations, risk management, or a related field preferred.
• Knowledge of security operations, incident response, identity and access management, endpoint security, and security best practices.
• Knowledge of vulnerability management, risk-based remediation, and security assessment practices.
• Familiarity with SIEM, endpoint detection and response, vulnerability assessment, identity security, and cloud security technologies.
• Ability to obtain an information security-related certification (e.g., Security+, CySA+, SC-200, SC-300, AZ-500, GSEC, CISA, or CISSP) within two years of start date.

Applicants must meet the minimum qualifications listed above. Equivalent education and experience may be considered in accordance with institutional policy.

• Experience testing or auditing technical controls and tracking corrective actions.
• Experience with Microsoft Entra ID, Intune, Defender, Sentinel, Purview, or comparable security platforms.
• Experience with vulnerability management tools such as Nessus, Pentera, Qualys, Rapid7, or equivalent platforms.
• Knowledge of Microsoft Active Directory, Microsoft 365, Azure, NIST Cybersecurity Framework, CIS Controls, HIPAA Security Rule, and FERPA.

PSN/PER Number: PSN 28013/PER 4266

Salary Range: $55,000 - $70,000  

Primary Location: Shreveport, LA (On-Site)

The LSU Systems Office has provided LSU Health-Shreveport employees with excellent benefit options designed with you and your dependents in mind. Our Benefits Section is available between 8:00 a.m. and 4:30 p.m., Monday through Friday, to help answer any questions you might have about these benefits.

• Salary is commensurate with experience and training
• Generous Health, Dental, and Vision Insurance
• Life Insurance
• Long-Term Disability Insurance
• Accidental Death & Dismemberment Insurance
• Flexible Spending Account
• Optional Retirement Plans

LSU Health is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Locate and click on the Apply Online button located at the bottom of the screen, enter your contact information, and upload your resume/CV.

If you are contacted for an interview, please let us know at that time if you will need special accommodations.