Job Summary
The Security Analyst is responsible for assessing and evaluating information security solutions and processes, supporting security operations, and providing technical guidance for the design and implementation of secure IT systems and networks. The role supports the establishment, implementation, and enhancement of information systems security and compliance practices in accordance with applicable policies, standards, and regulatory requirements. The ideal candidate will have foundational technical knowledge of IT systems security, network security, system administration, vulnerability management, incident response, and risk mitigation, along with strong communication and problem-solving skills.
Key Responsibilities
• Assist with day-to-day Security Operations Center (SOC) monitoring activities, tools, and processes.
• Provide hands-on support for security tools and technologies.
• Conduct threat hunts and specialized searches to identify evidence of compromise.
• Monitor security technologies and investigate alerts and anomalies.
• Investigate security incidents, gather evidence, and analyze data to determine potential threats.
• Analyze anomalous activity and potential threats to connected resources.
• Assess and evaluate information security solutions, processes, and controls.
• Provide technical guidance to support the design and implementation of secure information technology systems and networks.
• Guide junior security analysts in identifying and addressing risks and responding to information security issues.
• Support information security incident response, risk management, and threat mitigation activities.
• Collaborate with technical teams, business stakeholders, leadership, vendors, and other partners to support security and compliance risk mitigation efforts.
• Support vulnerability assessments, including scanning, analysis of results, and manual validation.
• Contribute to security compliance assessments, audits, and the implementation of applicable security policies and standards.
• Support the integration of Risk Management Framework (RMF) tasks and artifacts into the System Development Life Cycle (SDLC).
• Perform additional duties as assigned.
Required Qualifications
• 6+ years of experience in IT systems security or system administration, or an equivalent relevant educational background.
• Experience with information security incident response procedures and practices.
• Understanding of information technology and security concepts.
• Knowledge of operating systems, including Android, iOS, Linux, Windows, MVS, and VMware, as well as cloud computing, networks, hardware, software platforms, and protocols relevant to information security.
• Knowledge of secure networking technologies, including network firewalls, Intrusion Detection and Prevention Systems (IDS/IPS), Network Security Monitoring, and Security Information and Event Management (SIEM) systems.
• Knowledge of threat and vulnerability management, current security threats, and controls that protect the confidentiality, integrity, and availability of data.
• Understanding of TCP/IP and its component protocols, with the ability to analyze network traffic using tools such as tcpdump and Wireshark.
• Understanding of enterprise operations, secure practices, defense-in-depth principles, secure system configuration, network segmentation, and malicious code protection.
• Familiarity with applicable security policies, standards, procedures, and controls, including Centers for Medicare and Medicaid Services (CMS) requirements, NIST standards, Control Objectives for Information and Related Technology (COBIT), and Federal Risk and Authorization Management Program (FedRAMP).
• Ability to learn new technologies, processes, and tasks.
• Ability to work independently and collaboratively with multiple teams and vendors.
• Strong organizational skills, including the ability to multitask, prioritize assignments, meet deadlines, and report work status effectively.
• Intermediate proficiency in Microsoft Office applications, including Word, Excel, PowerPoint, and Visio, with the ability to work with templates and style guidelines.
• Ability to understand, retain, and communicate processes effectively.
• Strong written and verbal communication skills.
• Ability to adapt to changes, accept constructive feedback, and work effectively with stakeholders with varying technical and business backgrounds.
• High school diploma with 6 years of relevant work experience.
Preferred Qualifications
• Prior Health Information Technology experience.
• Experience with centralized log management.
• Familiarity with security regulatory requirements and standards, including NIST 800 series and CMS requirements.
• Experience performing or supporting information security compliance assessments and audits.
• Experience working in a Security Operations Center (SOC), including responding to alerts and anomalies, creating and interpreting dashboards, and coordinating with cross-functional teams.
• Hands-on experience implementing, operating, and maintaining secure computer systems, software, hardware, and networks.
• Experience with security in multi-tenant and cloud service environments, including vendor interface management.
• Experience working in or consulting for government or public-sector organizations.
• Bachelor's degree in Information Technology, Computer Science, or a related technical field, with at least 3 years of relevant work experience.
• Information security certifications such as CompTIA, ISC2, SANS GIAC, CCNA Security, or equivalent.
