Information Security Engineer III

Support the University’s information security program by operating and improving security infrastructure, tools, and risk controls.

Responsibilities

• Assist with oversight of a comprehensive information security program to establish and maintain security technology, tools, processes, procedures, reporting, and remediation to protect computing assets from unauthorized access, modification, destruction, or disclosure.
• Operate various high-complexity security infrastructure components.
• Monitor and maintain security tools and systems.
• Perform triage support for alerts, tickets, and incidents as needed.
• Assist and guide Security Analysts in resolving alerts when required.
• Conduct risk assessments, security compliance reviews, and vulnerability assessments.
• Research regulatory, risk, and threat information, including new regulations and changes to existing regulations, as well as emerging risk and threat data.
• Initiate changes in security technology, processes, and policies.
• Complete required training annually to expand security knowledge and skills.
• Administer, maintain, and improve information security tools, including data loss prevention (DLP) technologies across email, endpoint, and web.
• Configure security controls and monitoring alerts; investigate potential data exposure events; support policy enforcement across the organization’s technology environment.
• Support other enterprise security platforms, including secure web access gateways and anti-malware/endpoint protection tools, along with other information security technologies.
• Collaborate with Security Operations, Identity and Access Management, Infrastructure, Compliance, and business stakeholders to ensure security tools are effective, properly tuned, and aligned with organizational risk management goals.
• Assist and guide security analysts and less senior engineers as needed.

Requirements

• Master’s degree and 2 years of IT security engineering experience
• OR bachelor’s degree and 4 years of IT security engineering experience
• OR associate’s degree and 6 years of IT experience including 4 years of IT security engineering
• OR high school diploma or GED and 8 years of IT experience including 4 years of IT security engineering
• Advanced certification required upon hire or within 6 months of employment: CISSP and GCIH, GCIA, or similar.

Technologies

• Data loss prevention (DLP)
• CISSP, GCIH, GCIA
• SIEM
• Vulnerability management tools
• Microsoft 365
• Secure web access gateways
• Anti-malware/endpoint protection tools
• Web filtering
• Encryption
• FERPA, HIPAA, GLBA, PCI DSS, CMMC, NIST

Work Details

• Location: Tuscaloosa, AL (hybrid) subject to University policy
• Pay range: USD 74,900 to 101,100 per year (Salaried E12; minimum to midpoint)
• Schedule: Monday to Friday, 8:00am to 5:00pm
• Department/Organization: 200721 - Enterprise Technology
• Closing date: Nov 30 2026 - 22:55 CST

Background Investigation

• Final candidate(s) must pass a pre-employment background investigation.
• Information from social media and other internet sources may be used.
• A prior conviction reported from the background investigation does not automatically disqualify a candidate.
• Prior convictions or negative behavioral red flags are reviewed individually before a hiring decision.

Preferred Qualifications

• Experience administering or supporting enterprise security technologies including DLP, endpoint protection, email security, web filtering, secure web gateways, SIEM, or vulnerability management tools.
• Working knowledge of data protection concepts such as sensitive data discovery, data classification, encryption, access controls, and policy enforcement.
• Familiarity with regulatory and compliance requirements including FERPA, HIPAA, GLBA, PCI DSS, CMMC, NIST, or other data protection frameworks.
• Familiarity with Microsoft 365 security tools, endpoint management platforms, directory services, and identity-based access controls.