Enterprise Security Operations Analyst - Associate

All the benefits and perks you need for you and your family:
- Benefits from Day One
- Paid Days Off from Day One
- Student Loan Repayment Program
- Career Development
- Whole Person Wellbeing Resources
- Mental Health Resources and Support
Our promise to you:
Joining AdventHealth is about being part of something bigger. It's about belonging to a community that believes in the wholeness of each person, and serves to uplift others in body, mind and spirit. AdventHealth is a place where you can thrive professionally, and grow spiritually, by Extending the Healing Ministry of Christ. Where you will be valued for who you are and the unique experiences you bring to our purpose-minded team. All while understanding that together we are even better.
Schedule: Full Time
The role you'll contribute:
The Associate Security Operations Center Analyst is assigned to the Enterprise Information Security Operations team. The primary purpose of this position is to analyze, document, and escalate cyber security incidents. This position involves working security incident tickets, tracking security incident data, and collaborating with other members of AHS Enterprise Information Security and third party response teams.
The value you'll bring to the team:
• Perform basic analysis of security event data from SOC tools.
• Perform basic triage, analysis, and escalation of security event data forwarded from third party security partners.
• Participates in incidents response process through clear documentation, communication, and escalation of incident details.
• Communicate and provide manager with incident updates or work statuses in a timely manner
• Collaborate with other analysts to draft recommendations for configuration changes related to AHS cyber security toolsets or other tools as necessary
Qualifications
The expertise and experiences you'll need to succeed :
KNOWLEDGE AND SKILLS REQUIRED:
• Basic knowledge of Enterprise log management and SIEM solutions
• Basic understanding of information technology methodologies in multiple disciplines
• Basic understanding of a variety of network protocols
• Basic knowledge of Windows, Linux, and MacOS operating systems, client and server
• Basic knowledge of Windows authentication protocols
• Basic knowledge and understand of Microsoft Entra, and 365 Defender
• Familiar with information sharing specifications for cybersecurity
• Excellent time management skills to accomplish multiple concurrent tasks
• Strong interpersonal skills with a positive and enthusiastic attitude
• Ability to work well with people of varying levels of technical abilities
• Excellent oral and written communication skills
• Ability to receive calls and text messages 24 hours a day, seven days per week
KNOWLEDGE AND SKILLS PREFERRED:
• Experience with some security technologies
• Basic working knowledge of Data Loss Prevention technologies
• Basic knowledge of HIPAA, HITRUST, NIST, FISMA, FedRAMP, 27001, PCI, SOC audit processes
• Basic working knowledge of scripting languages (i.e. BASH, JavaScript, PowerShell, Perl, Python, PHP)
• Basic Malware Analysis skills
• Basic cybersecurity OSINT investigation skills
• Basic query language (KQL, Lucene)
• Basic memory analysis of suspect systems to detect active and dormant malware presence
• Basic file level analysis of Microsoft and Linux operating systems
• Working knowledge of healthcare or clinical physician clinical practice
EDUCATION AND EXPERIENCE REQUIRED:
• Associate degree OR substitute 3 years of Information Technology experience
1+ years of Information Technology experience 1+ years of cybersecurity experience
EDUCATION AND EXPERIENCE PREFERRED:
• Bachelor's or Master's degree
LICENSURE, CERTIFICATION OR REGISTRATION REQUIRED:
• Security+, CySA+ required within 90 days of hire
LICENSURE, CERTIFICATION OR REGISTRATION PREFERRED:
• BTL1, BTL2
• Microsoft SC-200
• Cyber Ranges including BTLO, TryHackMe, Cyber Defender, or HackTheBox
• CISSP