Cyber Security Analyst Ii

Salary Range: $45.8900 - $70.5400 /hour

Primary Duties and Responsibilities

The Cyber Security Analyst works to establish and maintain the corporate-wide Cyber Security program to ensure information assets are adequately protected. The Cyber Security Analyst is responsible for ensuring the confidentiality, integrity, and availability of Hoag enterprise-wide security devices. Working with the Cyber Security Operations Manager, the Cyber Security Analyst will actively drive system security assessments to identify vulnerabilities, remediation strategies, and assist system owners in implementing effective safeguards. The Analyst will conduct incident response activities from detection, analysis, remediation, and mitigation, to lessons-learned documentation.

Adheres to and maintains Hoag Cyber Security policies, procedures, and guidance. Works across organizational lines with multiple stakeholders (internal and/or external) to ensure deliverables are accurate, complete, and on time. Analyzes security events and incidents utilizing existing tool sets.

Works closely with team members and team leads for Cyber Security Incident Response activities. Proactively assesses security controls (technical, operational, procedural) for alignment with regulatory requirements (e.g., NIST CSF, HIPAA, HITRUST, PCI). Creates documentation for remediation and develops corrective action plans based on assessment findings and identified vulnerabilities.  Conducts log data analysis for Cyber technologies to secure Hoag’s information and systems.

This includes, but is not limited to:

- Security Information and Event Management (SIEM) tools

- Access Control

- Network Security

- Intrusion Detection / Prevention Systems

- Identity Governance and Administration

- Malware Protection

- Email Security

- Data Loss Prevention

- Cloud Security solutions

Education and Experience

Required:

• Bachelor’s degree in a relevant technical area such as Cyber Security, Computer Science, Computer Information Systems, Engineering, or related technical field, or equivalent work experience.
• A minimum of four to seven (4-7) years of relevant business/industry experience. Hands-on experience with CYBER SECURITY tools, process, methodologies and frameworks.Experience working incident response and cyber operations.
• Ability to set priorities and meet obligations in a timely manner.

Preferred:

• Master’s degree in Computer Science, Computer Information Systems, Cyber Security, Cyber Forensics, Engineering, or related technical field.
• Three plus (3+) years translating business requirements and priorities into CYBER SECURITY policies and procedures.
• Three plus (3+) years of experience in vulnerability assessment and/or penetration testing, digital forensics, or Incident Response.
• Experience in a hospital or healthcare related organization.
• Incident response experience, reverse malware engineering experience, vulnerability assessment experience, red Team, blue Team, or purple team experience, threat modeling, data analytics, and use case development and digital Forensics experience preferred

Certifications Required

• A minimum of one of the following:  GIAC Security Essentials (GSEC), GIAC Certified Incident Handler (GCIH), or Certified Ethical Hacker (C|EH)

Certifications Preferred

• GIAC Advanced Security Essentials – Enterprise Defender (GCED),
• Certified Information Systems Security Professional (CISSP), or equivalent.