Information Security Engineer

The Information Security Engineer position in the Information Security Office (ISO) is

responsible for leading and supporting security initiatives which mitigate risk and ensure system and data integrity at the University of Utah and University Health Care. This includes providing security guidance and technical risk assessments of new or ongoing projects, responding to and analyzing security incidents, and implementing new security technologies or processes. This is a highly collaborative position which requires strong analytical and communication skills.

This position is hybrid, requiring the selected candidate to either reside in or be willing to move to the Salt Lake City area.

Responsibilities

• Assist the University in meeting Information Security compliance obligations.
• Contribute to incident response procedures, participate in incident response activities, and help develop strategies to prevent future occurrences.
• Analyze indicators of compromise from endpoints, servers, and cloud environments to identify the root cause of breaches, malware infections, or other security issues.
• Provide security evaluations and guidance regarding new technologies or processes.
• Assist in legal discovery, evidence acquisition, and preservation.
• Support the Security Operations Center (SOC) with tools, data, and guidance.
• Stay up-to-date concerning emerging threats, vulnerabilities, and security solutions through research and industry sources.

This job description is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to the job.

Minimum Qualifications

EQUIVALENCYSTATEMENT: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years of directly related work experience).

Department may hire employee at one of the following job levels:

Information Security Engineer, I: Requires a bachelor's (or equivalency) + 2 years of directly related work experience or a master's (or equivalency) degree.

Information Security Engineer, II: Requires a bachelor's (or equivalency) + 4 years or a master's (or equivalency) + 2 years of directly related work experience.

Information Security Engineer, III: Requires a bachelor's (or equivalency) + 6 years or a master's (or equivalency) + 4 years of directly related work experience.

Information Security Engineer, IV: Requires a bachelor's (or equivalency) + 8 years or a master's (or equivalency) + 6 years of directly related work experience.

Information Security Engineer, V: Requires a bachelor's (or equivalency) + 10 years or a master's (or equivalency) + 8 years of directly related work experience.

Information Security Engineer, VI: Requires a bachelor's (or equivalency) + 12 years or a master's (or equivalency) + 10 years of directly related work experience.

Information Security Engineer, VII: Requires a bachelor's (or equivalency) + 14 years or a master's (or equivalency) + 12 years of directly related work experience.

Preferences

• A thorough understanding of security industry standards (i.e. NIST 800-53, ISO/IEC 27001, CIS Controls, etc.)
• Experience with compliance standards including HIPAA, FISMA, PCI, and FERPA
• Experience with information security in a higher-education or healthcare setting.
• One or more security-specific certifications (CISSP, CISA, etc.)

One or more of the following:

a.) Experience with Data Security Posture Management, both on-premises and Cloud/SaaS

b.) Microsoft Purview Sensitivity Labels, Email, SharePoint, and OneDrive access controls

c.) Data Loss Prevention tools, tactics, and procedures

d.) Data cataloging, classification, discovery, and governance; overall data security

Type

Benefited Staff

Special Instructions Summary

Additional Information

The University of Utah values candidates who have experience working in settings with students from diverse backgrounds and possess a strong commitment to improving access to higher education for historically underrepresented students.

Individuals from historically underrepresented groups, such as minorities, women, qualified persons with disabilities and protected veterans are encouraged to apply. Veterans' preference is extended to qualified applicants, upon request and consistent with University policy and Utah state law. Upon request, reasonable accommodations in the application process will be provided to individuals with disabilities.

The University of Utah is an Affirmative Action/Equal Opportunity employer and does not discriminate based upon race, ethnicity, color, religion, national origin, age, disability, sex, sexual orientation, gender, gender identity, gender expression, pregnancy, pregnancy-related conditions, genetic information, or protected veteran's status. The University does not discriminate on the basis of sex in the education program or activity that it operates, as required by Title IX and 34 CFR part 106. The requirement not to discriminate in education programs or activities extends to admission and employment. Inquiries about the application of Title IX and its regulations may be referred to the Title IX Coordinator, to the Department of Education, Office for Civil Rights, or both.

To request a reasonable accommodation for a disability or if you or someone you know has experienced discrimination or sexual misconduct including sexual harassment, you may contact the Director/Title IX Coordinator in the Office of Equal Opportunity and Affirmative Action:

Director/ Title IX Coordinator

Office of Equal Opportunity and Affirmative Action (OEO/AA)

383 University Street, Level 1 OEO Suite

Salt Lake City, UT 84112

Online reports may be submitted at

For more information:

To inquire about this posting, email: or call

The University is a participating employer with Utah Retirement Systems ("URS"). Eligible new hires with prior URS service, may elect to enroll in URS if they make the election before they become eligible for retirement (usually the first day of work). Contact Human Resources at for information. Individuals who previously retired and are receiving monthly retirement benefits from URS are subject to URS' post-retirement rules and restrictions. Please contact Utah Retirement Systems at or or University Human Resource Management at if you have questions regarding the post-retirement rules.

This position may require the successful completion of a criminal background check and/or drug screen.

This report includes statistics about criminal offenses, hate crimes, arrests and referrals for disciplinary action, and Violence Against Women Act offenses. They also provide information about safety and security-related services offered by the University of Utah. A paper copy can be obtained by request at the Department of Public Safety located at 1658 East 500 South.

Required fields are indicated with an asterisk (*).

• * What is your highest level of completed education?
• None
• High School Diploma or Equivalent
• Associate Degree
• Bachelor's Degree
• Master's Degree

• Doctorate Degree

• * How many years of related work experience do you have?

• Less than 6 years
• 6 years or more, but less than 9 years
• 9 years or more, but less than 12 years
• 12 years or more, but less than 15 years
• 15 years or more

Required Documents

• Resume

Optional Documents

• Cover Letter

Open Date

11/17/2025

Requisition Number

PRN43601B

Job Title

Information Security Engineers

Working Title

Information Security Engineer

Career Progression Track

P00

Track Level

FLSA Code

Computer Employee

Patient Sensitive Job Code?

No

Standard Hours per Week

40.00

Full Time or Part Time?

Full Time

Shift

Day

Work Schedule Summary

VP Area

President

Department

UIT Systems & Security

Location

Campus

City

Salt Lake City, UT

Type of Recruitment

External Posting

Pay Rate Range

88,000 to 131,300

Close Date

02/17/2026

Priority Review Date (Note - Posting may close at any time)