IT Security Analyst II- (AppSec)

If you're passionate about building a better future for individuals, communities, and our country-and you're committed to working hard to play your part in building that future-consider WGU as the next step in your career.

Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.

The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.

At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:

Job Description

*Position is on-site in WGU's Salt Lake City, Utah office*

As a Security Analyst II focused on Application Security, you will help strengthen WGU's security posture across applications, networks, and cloud environments. You will design and operate Zero Trust-aligned solutions, respond to security incidents, and partner closely with engineering and architecture teams to protect sensitive data and critical services for our learners and employees. Your work will directly support WGU's commitment to innovation and secure, modern technology experiences.

What you'll do

• Provide hands-on expertise in information security with a focus on Zero Trust Architecture, cloud security, and network engineering for WGU's applications and services.

• Lead and participate in security activities such as penetration testing, incident handling, digital forensics, continuous monitoring, and intrusion detection and prevention.

• Collaborate with architects, risk professionals, and other technical specialists to design, build, and integrate security tools, controls, and procedures into existing and new systems.

• Evaluate, select, test, and implement security-focused products and services, ensuring they align with WGU's technical standards and Zero Trust strategy.

• Operate and tune security tools and processes (SIEM, IDS/IPS, EDR, firewalls, logging, ticketing) while maintaining clear, current documentation for security systems and procedures.

• Investigate and remediate unusual or risky security configurations across applications, infrastructure, and cloud services, driving continuous improvement of security practices.

• Mentor and supervise less experienced security analysts, providing coaching, knowledge sharing, and technical guidance on security best practices and tools.

What you'll bring

• CISSP or equivalent knowledge and experience in information security.

• 3 or more years of hands-on experience in Information Security, Security Engineering, Cloud Security Engineering, or Network Security Engineering.

• Practical experience with Zero Trust Architecture and related tools such as NordLayer, Cloudflare One, Zscaler, Twingate, and/or Palo Alto Networks.

• Strong background in securing and administering network devices and operating systems, including configuration hardening and access control.

• Demonstrated experience analyzing SIEM, network, event, security, and IDS alert logs, and working with security industry standards and frameworks (including MITRE ATT&CK).

• Proven experience in incident handling, computer forensics, intrusion detection systems, firewalls, antivirus, and centralized logging / syslog.

• Scripting experience in languages such as Bash or Python with a strong working knowledge of automation to improve security operations and reduce manual effort.

• Experience working with compliance and regulatory requirements and interpreting and implementing security standards in a corporate environment.

Bonus points

• 8 or more years of information security experience, especially in Application Security roles.

• Experience designing and deploying security solutions in cloud environments such as AWS or Azure, and with endpoint security platforms.

• Relevant security certifications such as CISSP, CISA, CISM, GIAC, CCSP, CCSK, AWS security certifications, or similar, plus experience creating enduser security documentation and operating guides.

Experience in lieu of education

An equivalent combination of training, experience, credentials, or accomplishments demonstrating the ability to perform the essential functions of this job may substitute for education degree requirements.

What to expect in our hiring process

At WGU, our mission drives everything we do, including how we hire. Our interview experience is designed to give qualified candidates the opportunity to show their best work through meaningful conversations, practical problem-solving, and authentic collaboration.

We thoughtfully review every application and invite forward the candidates whose experience and potential best align with the role and our mission. If selected, candidates will hear from a recruiter or hiring manager who will guide them through the process. We aim to communicate decisions promptly and respectfully.

Interview steps

• Introductory call with a recruiter

• Interview with the hiring manager

• Technical team interview

Work location

This is a full-time, in-office position at WGU's office in Salt Lake City, Utah.

Visa sponsorship

While we welcome applicants from all backgrounds, WGU is not able to provide visa sponsorship for this role.

Position & Application Details

How to Apply: If interested, an application will need to be submitted online. Internal WGU employees will need to apply through the internal job board in Workday.

Additional Information

Disclaimer: The job posting highlights the most critical responsibilities and requirements of the job. It's not all-inclusive.

Accommodations: Applicants with disabilities who require assistance or accommodation during the application or interview process should contact our Talent Acquisition team at recruiting@wgu.edu.

Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to any protected characteristic as required by law.