Job ID: 293710
About Us
The University System of Georgia (USG) is comprised of 26 higher education institutions as well as the University System Office (USO). Within the USO, our administrative operations are primarily housed in the Trinity Washington Building located in downtown Atlanta. Our Information Technology Services (ITS) division is located in Athens. The University System of Georgia Shared Services Center (SSC) is located in Sandersville. The Georgia Public Library System is located in Atlanta. The Georgia Archives is located in Morrow. The State of Georgia Records Center is located in Austell.
Location
This role is based at the Information Technology Services (ITS) office in Athens, Georgia, located at 2500 Daniells Bridge Road. Onsite attendance is required five days a week, and remote work is not offered for this position. The work is typically performed in an office and requires long periods of time sitting while using a variety of computer-based tools.
This position is for permanent, full-time employment. Candidates must reside in the state of Georgia or be willing to relocate to Georgia as a condition of employment.
Please note that we do not provide visa sponsorship or support visa transfers for this position at any point in time. United States citizenship is required.
Job Summary
This position is an entry-level Security Operations Center (SOC) analyst role within a centralized SOC supporting multiple locations across the University System of Georgia. The role is responsible for continuous security monitoring, alert triage, initial investigation, documentation, and escalation of cybersecurity events using established procedures and runbooks.
The supervisor for this position assigns work in terms of general instructions. The supervisor spot-checks completed work for compliance with procedures, accuracy, and the nature and propriety of the results. This position has no supervisory responsibilities.
Work is performed on-site in Athens, Georgia , during standard business hours with participation in a regular on-call rotation .
Responsibilities • Monitor security alerts generated by centralized security platforms across multiple environments.
• Perform initial triage and analysis of alerts to identify false positives, benign activity, or potential security incidents.
• Follow documented SOC runbooks and standard operating procedures to investigate common security events (e.g., phishing, malware, suspicious authentication activity).
• Escalate validated or suspected security incidents to senior SOC analysts or incident responders in accordance with defined escalation criteria.
• Document investigations accurately and consistently, including timelines, evidence reviewed, actions taken, and escalation decisions.
• Collect and preserve relevant logs and supporting data to assist incident response and follow-on analysis.
• Support vulnerability and exposure monitoring activities as assigned, including validation and tracking.
• Assist with operational SOC reporting and metrics (e.g., alert volumes, escalation counts, incident summaries).
• Participate in system-wide cybersecurity activities related to security operations, including exercises or tabletop activities.
• Expectation to stay current with emerging threats, attack techniques, and security trends
• Participate in a regular on-call rotation to support after-hours escalation and incident response.
• Other duties, as assigned.
Required Qualifications • Associate degree or higher in cybersecurity, computer science, information technology, or a related field OR an equivalent combination of education, training, and practical experience (such as coursework, certifications, internships or professional experience).
Preferred Qualifications • Familiarity with modern operating systems (Windows, macOS, Linux).
• Basic exposure to scripting or query languages (e.g., Python, PowerShell, Bash, or log query languages) sufficient to read or modify existing scripts or queries.
• Basic exposure to security monitoring tools (SIEM, EDR, NDR, XDR, Vulnerability Scanners).
Proposed Salary
Budgeted Pay: $56,615 - $58,880
Required Documents to Attach • Resume/CV
• Cover Letter
• Names, phone numbers, and email addresses of at least 3 references.
Incomplete applications will not be considered.
Knowledge, Skills, & Abilities
Knowledge
• Foundational understanding of cybersecurity principles, threats, and defensive controls.
• Basic familiarity with common attack techniques such as phishing, credential abuse, and malware.
• Awareness of centralized security monitoring and logging concepts.
• Knowledge on how to identify and safely handle sensitive information.
Skills
• Ability to analyze security alerts and log data using established procedures.
• Strong attention to detail and disciplined documentation practices.
• Ability to follow defined workflows, playbooks, and escalation paths.
• Basic proficiency with ticketing or case management systems.
• Clear written communication for incident documentation and escalation.
Abilities
• Ability to manage multiple alerts and tasks in a time-sensitive operational environment.
• Ability to work independently on assigned investigations while recognizing escalation thresholds.
• Ability to collaborate effectively with SOC peers and downstream response teams.
• Ability to communicate cybersecurity concepts & issues to both technical and non-technical users & stakeholders.
• The employee in this role occasionally lifts light and heavy objects, typically less than 50 pounds.
USG Core Values
The University System of Georgia is comprised of our 26 institutions of higher education and learning as well as the System Office. Our USG Statement of Core Values are Integrity, Excellence, Accountability, and Respect. These values serve as the foundation for all that we do as an organization, and each USG community member is responsible for demonstrating and upholding these standards. More details on the USG Statement of Core Values and Code of Conduct are available in USG Board Policy 8.2.18.1.2 and can be found on-line at https://www.usg.edu/policymanual/section8/C224/#p8.2.18_personnel_conduct .
Additionally, USG supports Freedom of Expression as stated in Board Policy 6.5 Freedom of Expression and Academic Freedom found on-line at https://www.usg.edu/policymanual/section6/C2653 .
Conditions of Employment
Offers of employment are subject to federal and state laws, as well as the statutes, rules, and regulations of this institution, and the Bylaws and Policies of the Board of Regents (BOR) of the University System of Georgia (USG). These Bylaws and Policies are available for inspection upon request.
Background Check
Offers of employment are subject to a background investigation, including criminal records history, to determine eligibility for employment. Additionally, credentials and employment history stated in your application materials are also subject to verification.
Based on the duties and responsibilities associated with this position, a credit check is required and will be conducted under the provisions of the Fair Credit Reporting Act (FCRA).
The University System Office holds the sole discretion in assessing eligibility for employment. Employment Type: Full-Time