IT Statewide Infosec Associate Analyst 1, 2

At Nunez Community College, the Office of Technology Services (OTS) Information Security Team needs an associate analyst to help monitor and respond to cyber threats across the enterprise. In this onsite role in Baton Rouge, you will support centralized security alert triage, help coordinate incident response activities, and provide technical support across computer systems, applications, and networks.

What you’ll do

• Monitor, triage, and investigate real-time security alerts generated through Palo Alto Networks Cortex XSIAM and CrowdStrike Falcon Complete.
• Validate high-priority threat notifications, evaluate context, and perform initial containment actions aligned to enterprise incident response playbooks.
• Coordinate remediation workflows with the CrowdStrike Falcon Complete managed service team and relevant OTS technical verticals.
• Document investigation findings, root cause analyses, and response actions in the centralized security incident log.
• Assist in tuning detection logic, correlation rules, and automated response playbooks within Cortex XSIAM to reduce false positives.
• Monitor and manage the ServiceNow ticketing queue for proxy-related issues, access requests, and categorized URL reclassification tickets.
• Troubleshoot and resolve web filtering issues, SSL/TLS decryption exceptions, and SWG (secure web gateway) connection anomalies for enterprise users.
• Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or potential evasion attempts.
• Maintain operational documentation and standard operating procedures (SOPs) for enterprise proxy management and ticket workflows.
• Investigate suspicious internal and perimeter network activity, protocol anomalies, and anomalous host behavior using network telemetry and log sources.
• Conduct proactive threat hunting using threat intelligence indicators (IoCs) and behavioral analytics to identify potential adversary activity (TTPs).
• Correlate disparate log sources (firewall, DNS, VPN, authentication, and endpoint logs) to reconstruct attack timelines and assess scope of impact.
• Escalate confirmed intrusions or advanced persistent threats (APTs) to senior incident response personnel and OTS leadership.
• Monitor identity provider signals and behavioral analytics for indicators of compromised credentials, impossible travel, and unauthorized account modifications.
• Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
• Verify post-compromise cleanup actions, ensuring persistent access mechanisms (including malicious inbox forwarding rules and unauthorized OAuth applications) are identified and removed.
• Advise agency points of contact and help desk personnel on best practices for user remediation and credential hygiene.
• Perform other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.

Required experience and education

• Two years of experience in information technology; OR
• Six years of full-time work experience in any field; OR
• An associate’s degree in information technology; OR
• A bachelor’s degree.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

Additional minimum qualification rules: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience toward the six years of full-time work experience requirement in any field. The maximum substitution allowed is 120 semester hours, substituting for a maximum of four years of experience. The note about approved certifications and a Certificate of Eligibles also applies for hiring or promotion.

Technologies you’ll work with

• Palo Alto Networks Cortex XSIAM
• CrowdStrike Falcon Complete
• ServiceNow
• SSL/TLS
• Secure web gateway (SWG)
• IoCs
• TTPs
• OAuth

Role details

• Appointment type: Filled by new hire or by promotion of a current permanent status classified employee.
• Career progression: Participates in a career progression group and may be filled from this recruitment as an IT Infosec Associate Analyst 1 or 2.

How to apply

• No Civil Service test score is required for consideration.
• Click the Apply link above and complete the electronic application.

Background checks and eligibility

• Prior to a new hire, a background check including criminal record history will be conducted.
• Prospective employees may be subject to pre-employment drug testing.
• New hires will be subject to employment eligibility verification via the federal government’s E-Verify system.

The official job specifications for this role, as defined by the State Civil Service, can be found via the job specification link provided with the posting.