Internals

Information Security Consultant

  • Hourly Rate: 16.00
  • Summer Commitment: Preferred

Position Overview

The Information Security Consultant (ISC), under the guidance of the Lead Information Security Engineer and the guidance of the Chief Security Officer of Student Affairs - Information Technologies, is responsible for managing and tracking computer security cases related to students and families living in the residence halls. The ISC strives to provide residents in the residence halls with uninterrupted access to network resources on campus and around the world by coordinating support and troubleshooting efforts between front-line staff and the information security team using our in-house case management system. The ISC acts as a liaison between the Information Security and Residential Computing Consultant (RCC) teams. The ISC will also spearhead the security outreach program responsible for educating residence hall students and Residential Computing staff about computer and network security, through workshops, presentations, and Q&A sessions.

Qualifications

Required: While this position will be working with technical teams in a technical environment, it primarily requires excellent time management, organizational, and communication skills. The ISC will be expected to learn some basic networking and security concepts and terminology (IP addresses, hostnames, viruses, patches, etc.) but previous knowledge of these areas is not required; a candidate must also possess a willingness to perform routine daily duties related to security cases; effective oral and written communication skills and the ability to interact professionally with a diverse group of people; minimum GPA of 2.0.

Preferred: knowledge of TCP/IP networking; experience in securing Windows XP/Vista/7 computers (security updates, account management, ACL); working knowledge of *NIX; ability to prioritize tasks and handle emergency situations (including nights and weekends); ability to work productively in teams; attention to detail; experience with Macintosh OS, scripting experience (shell, Python, NSIS); knowledge of security tools (nmap, Nessus, snort); *NIX system administration experience (firewalls, logging, patching); technical knowledge of residence hall network; experience troubleshooting security cases; experience writing documentation, giving presentations and teaching workshops; friendly and approachable, GPA of 2.3 or higher.

Terms of Employment

  1. The period of employment for this position commences upon hire and continues through the end of the 2012-2013 academic year.
  2. The ISC is paid a wage of $16.00 per hour. The position's classification title is Assistant III. The ISA must be a currently enrolled UC Berkeley student with a minimum GPA of 2.0 (2.3 or higher preferred). Students with less than a 2.3 may be asked to limit their work hours.
  3. The ISC will participate in a required training program during the Spring 2012 semester, including a mandatory orientation on Friday, April 6th, 2012.
  4. The ISC must participate in staff training during the week of August 6th, 2012.
  5. The ISC is required to work 12-15 hours per week during the academic year. A work schedule will be determined in consultation with the Lead Information Security Engineer.
  6. This position is subject to a criminal background check. Driving is preferred. If driving, a DMV check for valid driver's license and driving record is required (anyone who works at University Village in Albany must drive the departmental vehicle). Position meets the following criteria:
    • Possession of key or card access to computer storage areas.
      • Control over campus-wide or departmental business processes, either through functional roles or systems security access, including responsibility for development or maintenance of critical business systems.
    • Operation of University vehicles as part of assigned job duties.
    • Specific job duties: Requires access to both on and off site computer equipment storage as well as access to business databases. Driving is preferred to get to various units and locations.
  7. It is a requirement that anyone in this position work in a safe and responsible manner while not putting him/herself or others at risk. This includes complying with applicable policies and regulations; using personal safety gear; observing warning signs; learning about potential hazards; and reporting unsafe conditions.
  8. Employment with the Information Technologies unit is subject to the applicant's ability to provide appropriate documentation and sign necessary papers for employment in conformance with state laws and University regulations.
  9. Continued employment is contingent upon satisfactory job performance evaluation by the Lead Information Security Engineer and the CSO.

Job Duties

(65%) Resolve Information Security Incidents & Perform Proactive Residential Information Security

  • Check email on a daily basis or ensure coverage from other Information Security team members
  • Using our in-house case management system:
    • Ensure that cases have been automatically entered into the system
    • Manually enter any cases that were not automatically entered
    • Respond promptly to inquiries for more information regarding bandwidth and security cases from residents or the campus security group
    • Coordinate investigation efforts around new and interesting security cases
    • Enhance case management workflow as necessary to improve customer service
    • Identify and notify residents of vulnerable computers when necessary.
    • Follow up with involved residents regarding the cause of the incident (assess resident's awareness of the situation, clearly communicate Residential Computing security policies regardless of the student's response). Conduct audits and collect evidence on resident's machines when necessary.
  • Assist other teams in developing tools and procedures related to network access control, monitoring and incident auto-parsing.
  • Investigate suspicious network activity (bandwidth spikes, DHCP problems).
  • Enforce the Residential Computing policies and respond to staff and resident inquiries about it.

(25%) Security Awareness & Education

  • Educate residence hall students on the importance of computer security. Assist with RCC training throughout the year.
  • Keep up-to-date with latest anti-malware tools
  • Obtain feedback about security cases from RCCs (attend RCC meetings).
  • Assist in training Residential Computing staff on computer security issues.
  • Issue Residential Computing security bulletins as necessary through collaboration with the Marketing team.
  • Aid in educating Student Affairs employees in topics related to computing security.

(10%) Administrative Duties

  • Keep online calendar updated regularly.
  • Ensure that all ISC projects are documented (ongoing status reports and a summary report).
  • Meet with Lead ISE weekly with status reports.

This job is not currently open for hiring