I'm a computer science student and I also work at the university I study at. Our department hosts many websites and servers. I was hired here pretty recently, and it seems my position seems to be "Software Developer and IT Administrator"
The job description said "Knowledge of systems administration and IT support are also important", however in the interview we talked only about Software Development, and there wasn't a lot of talk about IT maintenance in any of the training or meetings. It's my understanding that as standard practice of the university, there would normally be a person hired in our department solely for IT administration. However, the person who trained me and just quit is still listed as the IT Administrator by the University. He gets emails from our IT Services department and forwards them to me. It seems like the department plans to do nothing about that, instead they keep acting like I am now the IT Administrator. However, at no point was I professionally informed that I would be the primary administrator. I had assumed there would be an IT Administrator that might need help with tasks, and that was why it was included marginally in the job description.
Now, someone is launching a brute force dictionary based attack against one of our servers. We know that someone has already breached authentication as other servers have reported that dictionary based attacks are being launched from our server's IP address. I feel like I don't have the IT administrative experience necessary in this situation, and I don't feel like anyone else at my work is taking this security breach seriously enough.
How can I ensure that someone resolves this situation? I am not confident in my abilities to resolve the situation because of my inexperience.
To clarify, it seems like my boss (The director of the department) and my supervisor have basically been hiring students as software developers and trying to push the network administration responsibilities off onto them. The previous students seemed to have attempted to administrate the network. I don't know the last time our department had a professionally hired administrator, but it seems like its been a pretty long time as I don't have access (usernames/passwords) to most of the servers we own. I've only ever heard of students handling the administrative responsbilities.
If I tell my boss that I cannot handle IT Administration tasks, I have a feeling they will just ignore the entire attack and pretend like nothing happened.