Local Candidates Only
The Cybersecurity Analyst is responsible for all aspects of Cybersecurity Programs associated with Information Technology and Clinical Informatics. With a focus on baselines and standards, the Cybersecurity Analyst will be responsible to define baselines and create action plans to elevate and maintain baseline using best practice, NIST frameworks and CIS Controls. The Cybersecurity Analyst tasks can range from various proactive, reactive, and support services in collaboration with the Cybersecurity team. Other duties may involve a range of activities as needed – such as monitoring network activity and properly responding to malicious activity. Incident Response Planning, threat hunting, testing playbooks, and assisting with various cybersecurity projects.
Primary Responsibilities:
- Identify and spotlight vulnerabilities on on-premises and remote networks, correct problems, and prevent security breaches.
- Monitor and review network traffic for security incidents and events.
- Investigate incidents and respond to events in real time.
- Write detailed incident response reports.
- Develop and maintain policy for Cybersecurity Program.
- Conduct threat research.
- Build and sustain a Cyber Risk Framework that integrates governance, compliance, risk controls, requirements, oversight, and validation into IT and Clinical Informatics.
- Develop and execute strategy to ensure compliance with all mandated PII, HIPAA and security programs. Meeting and maintaining all specified requirements associated with each program.
- Ensure all employees are fully trained in the current cybersecurity trends and leads employees in identifying, developing, implementing, and maintaining processes across the organization to reduce data and information technology risks.
Requirements
Bachelor's Degree in Cybersecurity, Computer Science, or equivalent education and Cyber responsibilities
- Demonstrated knowledge of penetration testing, network security, and incident response.
- Broad understanding of security technologies including firewalls, proxies, SIEM, antivirus software, and IDPs
- Demonstrated familiarity of tools such as Splunk, Snort and Nessus
- Broad understanding and knowledge of client and server architectures and Webserver architectures and systems.
- Broad understanding and knowledge of networking technologies, architectures, and tools.
- Knowledge of internet network addressing.
- Broad understanding and knowledge of programming languages and methodologies
- GIAC, CISM, CISSP or equivalent certification preferred but not required.
.jpg
)