Job Details: Job Location: OSC Utah - Salt Lake City, UT, Salary Range: Undisclosed, The Associate Analyst, Cybersecurity is an entry-level security role for a motivated individual with an IT foundation who is actively building security knowledge. Working under close direction of the Senior Analyst and Director of Information Security, this person executes day-to-day security tasks accurately, escalates early, documents thoroughly, and grows steadily toward Analyst I proficiency.  Security Monitoring & Incident Response  Learn to monitor security alerts using Cato and Checkpoint alongside the Senior Analyst, building triage judgment before working independently.  Under Senior Analyst guidance, document alert details, gather initial context, and flag events for review; does not independently close alerts until proficiency is demonstrated.  Assist during incident response as directed; document findings accurately while the Senior Analyst or Director leads investigation and containment.  Document all incidents and lessons learned; help manage the daily FreshService inbox and InfoSec mailbox under Senior Analyst oversight.  Follow established security playbooks step-by-step; ask the Senior Analyst before deviating from any documented process.  Vulnerability Management  Learn to run vulnerability scans using Tenable under Senior Analyst instruction, with scope and results reviewed before distribution.  Keep vulnerability tracking records current as directed; Senior Analyst determines prioritization and owner communications.  Verify remediation activities to confirm vulnerabilities are fully resolved.  Pull and organize vulnerability data as directed; does not interpret trends or produce reports independently.  Identity & Access Security  Learn identity and access controls within Microsoft Entra ID; assist with assigned tasks under Senior Analyst direction.  Assist with access reviews by pulling reports and logging entries; flag anomalies to the Senior Analyst and process removals only after approval.  Learn to recognize anomalous sign-in and access patterns; escalate all concerns to the Senior Analyst.  Vendor & Third-Party Risk  Gather vendor documentation and complete questionnaire sections as directed; does not independently evaluate or rate vendor risk.  Complete vendor questionnaire entries accurately; flag anything unclear to the Senior Analyst.  Keep third-party risk register records current as directed; does not modify risk ratings without Senior Analyst approval.  Participate in software onboarding reviews prior to procurement approval.  Security Governance, Compliance & Awareness  Assist with maintaining InfoSec policies and procedures; support internal audits and compliance reviews.  Administer phishing simulations, coordinate security training assignments, and track completion rates.  Contribute to disaster recovery documentation and tabletop exercises.  Stay current on emerging threats and developments relevant to higher education.  Qualifications:   Required Bachelor’s degree from an accredited institution in any field; IT or technical background a plus Experience in IT support, helpdesk, or systems administration; no prior cybersecurity experience required Basic familiarity with Microsoft 365 and Windows; M365 security tool experience a plus General understanding of user accounts, permissions, and access concepts from an IT perspective Strong written and verbal communication skills; able to document findings clearly Preferred CompTIA Security+ in progress or planned within first 12 months Hands-on exposure via home labs, TryHackMe, Hack The Box, or similar platforms Demonstrated curiosity about cybersecurity through self-study or personal projects Experience with ticketing systems such as FreshService or ServiceNow Pursuit of a degree or certification in cybersecurity or information technology