General Responsibilities:
Responsible for constantly detecting and preventing cyber threats to the company computing environment. Identify weaknesses of the company computing infrastructure (software, hardware, networks) and find creative ways to protect it. Plan, implement, upgrade, or monitor security measures to protect computer networks and information. Ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure. Serves as an internal company lead for responding to business-impacting computer security breaches and viruses. Night and weekend hours as needed.
Essential Job Functions:
1. Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
2. Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
3. Plan, implement and upgrade security measures and controls.
4. Establish plans and protocols to protect digital files and information systems against unauthorized access, modification and destruction.
5. Maintain data and monitor security access.
6. Perform vulnerability testing, risk analyses and security assessments.
7. Perform risk assessments and execute tests of the data processing system to ensure the functioning of data processing activities and security measures.
8. Conduct internal security audits.
Additional Essential Job Functions:
1. Anticipate security alerts, incidents, and disasters and reduce their likelihood.
2. Collaborate technically with the infrastructure team to manage the network, intrusion detection, prevention systems and encryption measures.
3. Analyze security breaches to determine the root cause.
4. Recommend and install appropriate tools and countermeasures.
5. Define, implement, and maintain corporate security policies.
6. Collaborate with the appropriate areas to train fellow employees in security awareness and procedures.
7. Coordinate security plans with outside vendors.
Further Essential Job Functions:
1. Respond to eDiscovery, data collection queries, and digital forensics requests.
2. Work an on-call rotating schedule outside the regular schedule on a rotating basis.
3. Maintain and protect sensitive and private information by keeping employee records confidential in accordance with HIPAA, local, state, and federal laws and regulations.
4. Ensures that PHI/ePHI of employees, plan participants, patients, and other assigned individuals are maintained and transmitted securely and legally.
5. Perform all work safely in accordance with established safety policies and procedures. Comply with all safety and health standards and guidelines issued by management.
6. Perform other duties as assigned.
Education:
1. Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field required.
Experience:
1. Five (5) years of experience, specifically in a security analyst job required.
2. Penetration testing and vulnerability testing & remediation.
3. Anti-virus and anti-malware.
4. TCP/IP, computer networking, routing and switching.
5. Firewalls, proxies, IDS, IPS, and security appliances.
6. Windows and Linux operating systems.
7. Network protocols and packet analysis tools.
8. Comprehension of development & scripting languages (C#, VB, Python, C, .NET).
9. Cloud computing.
Certificates, Licenses, Registrations:
1. Valid driver’s license required.
2. The following certifications are highly preferred:
3. CEH Certified Ethical Hacker.
4. ECSA EC-Council Certified Security Analyst.
#J-18808-Ljbffr