Security Analyst
Healthstat, Inc

Job Info

---

Essential Duties & Responsibilities

Security:

• Configure and analyze security tools and software.
• Review daily and historic data to identify, report, and remedy vulnerabilities.
• Document, prioritize, and analyze security threats, incidents, and key metrics.
• Regular review of security logs, reports, and other information from both internal and external sources to identify and manage security risks and issues.
• Evaluate security controls of proposed vendor products and service providers.
• HITRUST, SOC2, PCI DSS assessment, remediation, documentation, and certification activities.
• Assist in design and execution of security related training programs and communications.
• Verify and monitor that laptops and other devices have the appropriate security tools installed, operating, and updated.
• Investigate, document, and remedy security incidents and breaches.
• Create and manage Incident Response playbooks and IT Security Procedures.
• Root Cause Analysis
• Develop security standards and best practices for Everside Health.
• Stay up to date on information technology trends and security standards.

Projects:

• As needed, lead the planning, implementation, communication and tracking of projects assigned to the IT Security department.
• Ensure on-time, on-budget project completion and achievement of agreed to business outcomes
• Provide routine status and issue tracking to IT leadership and project stakeholders.

Other:

• Participates in routine IT team and company meetings.
• Maintains knowledge of and advocacy for company IT policies, security controls and related compliance obligations (e.g., HIPAA, HITRUST).
• Contributes to the ongoing improvement of IT processes, systems, and knowledge.

Desired Attributes

• Organized with exceptional attention to detail.
• Strong sense of accountability and ownership.
• Skilled problem solver.
• Ability to effectively communicate technical concepts to non-technical audiences in a manner that is understandable and meaningful to them.
• Ability to multi-task and balance multiple competing demands.
• Forward-thinking; initiating and proactive.
• Experienced and comfortable with fluid, rapid, complex, and changing work environments.
• Ability to develop strong, results oriented working relationships with internal departments, vendors, and clients.
• Enthusiastic team player with a strong drive to create a positive work environment.
• Ability to train end users.

Minimum Qualifications

• Bachelor's Degree in Information Technology, Computer Science, or related experience.
• 2-3 years IT Security experience
• Strong technical experience with Windows OS, networking, SIEM, IDS/IPS, Incident Response, Server and endpoint hardening, application configuration, installation, testing, maintenance, and support.
• Specific experience with Windows 10, Sophos EPP, Cisco, Meraki, SecureWorks, Microsoft SCCM, Tripwire, LogMeIn, Dell laptops, AWS, Salesforce, Microsoft 365, Smartsheet, PowerShell, and Forcepoint is highly desired.
• Security certifications related to job responsibilities highly desirable (e.g. Sec+, CEH, CASP, CISSP).
• Working knowledge of privacy and security standards (e.g., HIPAA, HITRUST, NIST).

Pay Range: $65,000 - $85,000

This job has expired.