Cyber Security Analyst I

GBMC HealthCare is seeking a Cyber Security Analyst I / Systems Administrator to support the security of its information systems and electronic data. The role manages system access, monitors and audits security controls, responds to vulnerabilities and security events, administers cybersecurity policies, and delivers security education and training.

Responsibilities:

• The access management, auditing and deployment of user-based permissions to GBMC systems, electronic data and ensuring the overall safety of Information System assets
• The implementation, monitoring and auditing of security measures for the protection of email systems, user credentials, and electronic protected data
• The documentation of all relevant standard operating procedures and policies
• Deploying threat mitigation measures
• The triage and analysis of identified vulnerabilities or security events
• Security education and training
• Maintains current knowledge of relevant technology and industry best practice
• Participates in special projects and other duties as assigned
• Responsible for access control, passwords, and account creation and administration and auditing
• Responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities
• Collects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations
• Assist in the creation, auditing and maintenance of policies and procedures in relation to IT and cybersecurity
• Ability to prepare and deliver education and awareness briefings to ensure that systems, network, and data users are aware of and adhere to systems security policies and procedures
• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise
• Cyber threat analysis and triage using SOAR, SIEM and behavior analysis technologies
• Threat response and remediation using NGEP
• Implementing security best practices and controls for Microsoft 365 and production EMRs
• Red team/Blue team exercises for overall system and team analysis

Requirements:

• Bachelor's degree or current intermediate level IT security, cybersecurity or EMR certifications. Associate degree plus 2 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position. Degree must be in Computer Science or a related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Healthcare IT, Information Assurance, Information Security, and Information Systems)
• At least one year of experience required if possess Bachelor's degree or current intermediate level IT security, cybersecurity or EMR certifications; or at least two years of experience required if possess Associate's degree. Relevant experience must be in computer or information systems design/development, programming, information/cyber/network security, vulnerability analysis, penetration testing, computer forensics, information assurance, and/or systems engineering
• • SIEM analysis
• • Next Gen Endpoint detection management and analysis
• • Proficiency with Active Directory and Microsoft Exchange 365
• • Knowledge of Electronic mail security and protection
• • Multifactor Authentication administration
• • Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• • EMR access and security management
• • Systems Access Management
• • Role based database management
• • Effective written and verbal communication
• • Industry cyber tool certifications considered if relevant to GBMC
• • Employee has knowledge and understanding of patient and workforce safety as it relates to job duties
• • Demonstrates competency in the delivery of care and applies the knowledge to meet age-specific needs if applicable
• • Preference for certifications for EMR security, network security, cybersecurity or digital forensics from EC-Council, CompTIA, SANS