University of Utah
Join to apply for the
Information Security Engineer
role at
University of Utah .
Job Summary The Information Security Engineer position in the Information Security Office (ISO) is responsible for leading and supporting security initiatives that mitigate risk and ensure system and data integrity at the University of Utah and University Health Care. The role includes providing security guidance and technical risk assessments for new or ongoing projects, responding to and analyzing security incidents, and implementing new security technologies or processes. This highly collaborative position requires strong analytical and communication skills. It is a hybrid position requiring the selected candidate to either reside in or be willing to move to the Salt Lake City area.
Responsibilities
Assist the University in meeting Information Security compliance obligations.
Contribute to incident response procedures, participate in incident response activities, and help develop strategies to prevent future occurrences.
Analyze indicators of compromise from endpoints, servers, and cloud environments to identify the root cause of breaches, malware infections, or other security issues.
Provide security evaluations and guidance regarding new technologies or processes.
Assist in legal discovery, evidence acquisition, and preservation.
Support the Security Operations Center (SOC) with tools, data, and guidance.
Stay up-to-date concerning emerging threats, vulnerabilities, and security solutions through research and industry sources.
This job description is not intended to be a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to the job.
Minimum Qualifications EQUIVALENCY STATEMENT:
1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience).
Information Security Engineer – Job Levels
Information Security Engineer, I:
Requires a bachelor's (or equivalency) + 2 years of directly related work experience or a master's (or equivalency) degree.
Information Security Engineer, II:
Requires a bachelor's (or equivalency) + 4 years or a master's (or equivalency) + 2 years of directly related work experience.
Information Security Engineer, III:
Requires a bachelor's (or equivalency) + 6 years or a master's (or equivalency) + 4 years of directly related work experience.
Information Security Engineer, IV:
Requires a bachelor's (or equivalency) + 8 years or a master's (or equivalency) + 6 years of directly related work experience.
Information Security Engineer, V:
Requires a bachelor's (or equivalency) + 10 years or a master's (or equivalency) + 8 years of directly related work experience.
Information Security Engineer, VI:
Requires a bachelor's (or equivalency) + 12 years or a master's (or equivalency) + 10 years of directly related work experience.
Information Security Engineer, VII:
Requires a bachelor's (or equivalency) + 14 years or a master's (or equivalency) + 12 years of directly related work experience.
Preferences
A thorough understanding of security industry standards (i.e. NIST 800-53, ISO/IEC 27001, CIS Controls, etc.)
Experience with compliance standards including HIPAA, FISMA, PCI, and FERPA
Experience with information security in a higher‑education or healthcare setting.
One or more security‑specific certifications (CISSP, CISA, etc.)
One or More of the Following
Experience with Data Security Posture Management, both on‑premises and Cloud/SaaS
Microsoft Purview Sensitivity Labels, Email, SharePoint, and OneDrive access controls
Data Loss Prevention tools, tactics, and procedures
Data cataloging, classification, discovery, and governance; overall data security
Special Instructions Requisition Number:
PRN43601B
Full Time or Part Time?
Full Time
Department:
00954 - UIT Systems & Security
Location:
Campus
Pay Rate Range:
88,000 to 131,300
Close Date:
2/17/2026
Work Schedule Summary
– Open Until Filled
To apply, visit https://utah.peopleadmin.com/postings/192645
#J-18808-Ljbffr
Information Security Engineer
role at
University of Utah .
Job Summary The Information Security Engineer position in the Information Security Office (ISO) is responsible for leading and supporting security initiatives that mitigate risk and ensure system and data integrity at the University of Utah and University Health Care. The role includes providing security guidance and technical risk assessments for new or ongoing projects, responding to and analyzing security incidents, and implementing new security technologies or processes. This highly collaborative position requires strong analytical and communication skills. It is a hybrid position requiring the selected candidate to either reside in or be willing to move to the Salt Lake City area.
Responsibilities
Assist the University in meeting Information Security compliance obligations.
Contribute to incident response procedures, participate in incident response activities, and help develop strategies to prevent future occurrences.
Analyze indicators of compromise from endpoints, servers, and cloud environments to identify the root cause of breaches, malware infections, or other security issues.
Provide security evaluations and guidance regarding new technologies or processes.
Assist in legal discovery, evidence acquisition, and preservation.
Support the Security Operations Center (SOC) with tools, data, and guidance.
Stay up-to-date concerning emerging threats, vulnerabilities, and security solutions through research and industry sources.
This job description is not intended to be a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to the job.
Minimum Qualifications EQUIVALENCY STATEMENT:
1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience).
Information Security Engineer – Job Levels
Information Security Engineer, I:
Requires a bachelor's (or equivalency) + 2 years of directly related work experience or a master's (or equivalency) degree.
Information Security Engineer, II:
Requires a bachelor's (or equivalency) + 4 years or a master's (or equivalency) + 2 years of directly related work experience.
Information Security Engineer, III:
Requires a bachelor's (or equivalency) + 6 years or a master's (or equivalency) + 4 years of directly related work experience.
Information Security Engineer, IV:
Requires a bachelor's (or equivalency) + 8 years or a master's (or equivalency) + 6 years of directly related work experience.
Information Security Engineer, V:
Requires a bachelor's (or equivalency) + 10 years or a master's (or equivalency) + 8 years of directly related work experience.
Information Security Engineer, VI:
Requires a bachelor's (or equivalency) + 12 years or a master's (or equivalency) + 10 years of directly related work experience.
Information Security Engineer, VII:
Requires a bachelor's (or equivalency) + 14 years or a master's (or equivalency) + 12 years of directly related work experience.
Preferences
A thorough understanding of security industry standards (i.e. NIST 800-53, ISO/IEC 27001, CIS Controls, etc.)
Experience with compliance standards including HIPAA, FISMA, PCI, and FERPA
Experience with information security in a higher‑education or healthcare setting.
One or more security‑specific certifications (CISSP, CISA, etc.)
One or More of the Following
Experience with Data Security Posture Management, both on‑premises and Cloud/SaaS
Microsoft Purview Sensitivity Labels, Email, SharePoint, and OneDrive access controls
Data Loss Prevention tools, tactics, and procedures
Data cataloging, classification, discovery, and governance; overall data security
Special Instructions Requisition Number:
PRN43601B
Full Time or Part Time?
Full Time
Department:
00954 - UIT Systems & Security
Location:
Campus
Pay Rate Range:
88,000 to 131,300
Close Date:
2/17/2026
Work Schedule Summary
– Open Until Filled
To apply, visit https://utah.peopleadmin.com/postings/192645
#J-18808-Ljbffr