Entry Level Lead Information Security Analyst Jobs
New grad lead information security analyst jobs are open to recent graduates and entry level candidates with zero to two years of experience, where a strong portfolio or internship work can matter more than a long resume. Most openings mix on-site and remote settings across Education, Banking & Financial Services, and Healthcare & Medical Services, with employers like Deutsche Bank, Prisma Health, and Longwood University hiring at this level now.
Find JobsOverview
Showing 5 of 11+ Entry Level Lead Information Security Analyst jobs
Location: Tuscaloosa, Alabama, United States
Pay Grade/Pay Range: Minimum: $74,900 - Midpoint: $101,100 (Salaried E12)
Department/Organization: 200721 - Enterprise Technology
Normal Work Schedule: Monday - Friday 8:00am to 5:00pm
Note to Applicants: Position is eligible for hybrid work subject to University policy.
Job Summary: The Information Security Engineer III assists with oversight of a comprehensive information security program to ensure security technology, tools, processes, procedures, reporting, and remediation are put into place and maintained to protect the University’s computing assets from unauthorized access, modification, destruction, or disclosure. Operates various high-complexity security infrastructure components. Monitors and maintains security tools and systems. Backs up triage of alerts, tickets, and incidents as needed. Assists and guides Security Analysts in resolution of alerts as needed. Conducts risk assessments, security compliance reviews, and vulnerability assessments. Researches regulatory, risk, threat information, new regulations or changes to existing regulations and new risk or threat information. Initiates changes in security technology, processes, and policies. Completes training annually to increase security knowledge and skills.
Additional Department Summary: The Information Security Engineer III assists with oversight of a comprehensive information security program to ensure security technology, tools, processes, procedures, reporting, and remediation are put into place and maintained to protect the University’s computing assets from unauthorized access, modification, destruction, or disclosure. Implements and operates various high-complexity security infrastructure components. Is responsible for administering, maintaining, and improving the organization’s information security tools including data loss prevention (DLP) technologies across email, endpoint, and web. This role helps protect sensitive institutional data by configuring security controls, monitoring alerts, investigating potential data exposure events, and supporting policy enforcement across the organization’s technology environment.
In addition to DLP responsibilities, this position supports other enterprise security platforms, including secure web access gateways, anti-malware/endpoint protection tools, and other information security technologies. The Information Security Engineer III works closely with security operations, identity and access management, infrastructure, compliance, and business stakeholders to ensure security tools are effective, properly tuned, and aligned with organizational risk management goals. Backs up triage of alerts, tickets, and incidents as needed. Assists and guides security analysts and less senior engineers as needed. Conducts risk assessments, security compliance reviews, and vulnerability assessments. Research regulatory, risk, threat information, new regulations or changes to existing regulations and new risk or threat information. Initiates change in security technology, processes, and policies. Completes training annually to increase security knowledge and skills.
Required Minimum Qualifications: Master's degree and two (2) years of IT security engineering experience; OR bachelor's degree and four (4) years of IT security engineering experience; OR associate's degree and six (6) years of IT experience to include four (4) years of IT security engineering; OR high school diploma or GED and eight (8) years of IT experience to include four (4) years of IT security engineering.
Additional Required Department Minimum Qualifications: Advanced certification required upon hire or within 6 months of employment – CISSP and GCIH, GCIA, or similar.
Preferred Qualifications: Experience administering or supporting enterprise security technologies such as DLP, endpoint protection, email security, web filtering, secure web gateways, SIEM, or vulnerability management tools. Working knowledge of data protection concepts, including sensitive data discovery, data classification, encryption, access controls, and policy enforcement. Familiarity with regulatory and compliance requirements such as FERPA, HIPAA, GLBA, PCI DSS, CMMC, NIST, or other data protection frameworks. Familiarity with Microsoft 365 security tools, endpoint management platforms, directory services, and identity-based access controls.
Background Investigation Statement: Prior to hiring, the final candidate(s) must successfully pass a pre-employment background investigation and information obtained from social media and other internet sources. A prior conviction reported as a result of the background investigation DOES NOT automatically disqualify a candidate from consideration for this position. A candidate with a prior conviction or negative behavioral red flags will receive an individualized review of the prior conviction or negative behavioral red flags before a hiring decision is made.
Equal Employment Opportunity: The University of Alabama is an Equal Employment/Equal Educational Opportunity Institution. All qualified applicants will receive consideration for employment or volunteer status without regard to any legally protected basis and will not be discriminated against because of their protected status. Applicants and employees of this institution are protected under Federal law from discrimination on several bases. More information is available in the EEOC’s Know Your Rights: Workplace discrimination is illegal poster.
The University of Alabama affirms its longstanding commitment to institutional neutrality, free speech, and academic freedom.
Location: Tuscaloosa, Alabama, United States
Pay Grade/Pay Range: Minimum: $74,900 - Midpoint: $101,100 (Salaried E12)
Department/Organization: 200721 - Enterprise Technology
Normal Work Schedule: Monday - Friday 8:00am to 5:00pm
Note to Applicants: Position is eligible for hybrid work subject to University policy.
Job Summary: The Information Security Engineer III assists with oversight of a comprehensive information security program to ensure security technology, tools, processes, procedures, reporting, and remediation are put into place and maintained to protect the University’s computing assets from unauthorized access, modification, destruction, or disclosure. Operates various high-complexity security infrastructure components. Monitors and maintains security tools and systems. Backs up triage of alerts, tickets, and incidents as needed. Assists and guides Security Analysts in resolution of alerts as needed. Conducts risk assessments, security compliance reviews, and vulnerability assessments. Researches regulatory, risk, threat information, new regulations or changes to existing regulations and new risk or threat information. Initiates changes in security technology, processes, and policies. Completes training annually to increase security knowledge and skills.
Additional Department Summary: The Information Security Engineer III assists with oversight of a comprehensive information security program to ensure security technology, tools, processes, procedures, reporting, and remediation are put into place and maintained to protect the University’s computing assets from unauthorized access, modification, destruction, or disclosure. Implements and operates various high-complexity security infrastructure components. Is responsible for administering, maintaining, and improving the organization’s information security tools including data loss prevention (DLP) technologies across email, endpoint, and web. This role helps protect sensitive institutional data by configuring security controls, monitoring alerts, investigating potential data exposure events, and supporting policy enforcement across the organization’s technology environment.
In addition to DLP responsibilities, this position supports other enterprise security platforms, including secure web access gateways, anti-malware/endpoint protection tools, and other information security technologies. The Information Security Engineer III works closely with security operations, identity and access management, infrastructure, compliance, and business stakeholders to ensure security tools are effective, properly tuned, and aligned with organizational risk management goals. Backs up triage of alerts, tickets, and incidents as needed. Assists and guides security analysts and less senior engineers as needed. Conducts risk assessments, security compliance reviews, and vulnerability assessments. Research regulatory, risk, threat information, new regulations or changes to existing regulations and new risk or threat information. Initiates change in security technology, processes, and policies. Completes training annually to increase security knowledge and skills.
Required Minimum Qualifications: Master's degree and two (2) years of IT security engineering experience; OR bachelor's degree and four (4) years of IT security engineering experience; OR associate's degree and six (6) years of IT experience to include four (4) years of IT security engineering; OR high school diploma or GED and eight (8) years of IT experience to include four (4) years of IT security engineering.
Additional Required Department Minimum Qualifications: Advanced certification required upon hire or within 6 months of employment – CISSP and GCIH, GCIA, or similar.
Preferred Qualifications: Experience administering or supporting enterprise security technologies such as DLP, endpoint protection, email security, web filtering, secure web gateways, SIEM, or vulnerability management tools. Working knowledge of data protection concepts, including sensitive data discovery, data classification, encryption, access controls, and policy enforcement. Familiarity with regulatory and compliance requirements such as FERPA, HIPAA, GLBA, PCI DSS, CMMC, NIST, or other data protection frameworks. Familiarity with Microsoft 365 security tools, endpoint management platforms, directory services, and identity-based access controls.
Background Investigation Statement: Prior to hiring, the final candidate(s) must successfully pass a pre-employment background investigation and information obtained from social media and other internet sources. A prior conviction reported as a result of the background investigation DOES NOT automatically disqualify a candidate from consideration for this position. A candidate with a prior conviction or negative behavioral red flags will receive an individualized review of the prior conviction or negative behavioral red flags before a hiring decision is made.
Equal Employment Opportunity: The University of Alabama is an Equal Employment/Equal Educational Opportunity Institution. All qualified applicants will receive consideration for employment or volunteer status without regard to any legally protected basis and will not be discriminated against because of their protected status. Applicants and employees of this institution are protected under Federal law from discrimination on several bases. More information is available in the EEOC’s Know Your Rights: Workplace discrimination is illegal poster.
The University of Alabama affirms its longstanding commitment to institutional neutrality, free speech, and academic freedom.
See All 11 Entry Level Lead Information Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsEntry Level Lead Information Security Analyst Job Market
Who's Hiring
Top Industries Hiring
- Education
- Banking & Financial Services
- Healthcare & Medical Services
- Fintech
- Insurance
Entry Level Lead Information Security Analyst Jobs: Frequently Asked Questions
How do I get an entry level lead information security analyst job?
Start by building hands-on experience through internships, home labs, or capture-the-flag competitions, since employers at this level look for demonstrated skills over years on a resume. Earning foundational certifications like CompTIA Security+ or Google Cybersecurity Certificate strengthens your profile. Tailor your resume to each posting, highlight any exposure to vulnerability assessment or SIEM tools, and apply to roles that explicitly welcome new graduates or candidates with limited experience.
Which companies hire entry level lead information security analysts?
Companies hiring entry level lead information security analysts right now include Deutsche Bank, Prisma Health, and Longwood University, based on current listings on Migrate Mate as of November 2026. At this level, hiring comes from a broad range of employers, including government contractors, financial institutions, healthcare organizations, and technology firms that maintain active security teams with structured entry-level programs.
Are there remote entry level lead information security analyst jobs?
Yes, though the mix varies by employer and role type. About 38% of entry level lead information security analyst openings are remote or hybrid as of November 2026, giving candidates flexibility to apply beyond their local market. Some on-site roles exist for positions requiring access to secure infrastructure, so reading each posting carefully helps you match your preferences before applying.
Are these new grad lead information security analyst jobs?
Yes, this page includes new grad, recent graduate, and junior roles that welcome candidates with little or no professional experience. A new-grad-friendly posting typically calls for zero to two years of experience, accepts internship or academic project work in place of full-time history, and may prioritize certifications or a demonstrated portfolio over an extensive resume. These are the right listings to target when you are entering the field for the first time.
Which industries hire the most entry level lead information security analysts?
Entry Level lead information security analyst roles concentrate in Education, Banking & Financial Services, and Healthcare & Medical Services, based on current listings on Migrate Mate as of November 2026. These sectors drive hiring at this level because they handle sensitive data at scale, face regulatory compliance requirements, and need growing security teams that can bring in junior talent and develop it internally.