Healthcare Security Operations Consultant
Role details
Job location
Tech stack
Job description
- Support vulnerability management and secure configuration operations, ensuring alignment with federal cybersecurity mandates.
- Manage, monitor, and monitor vulnerabilities across NIH/HHS systems using tools such as Tenable and coordinate timely remediation activities.
- Develop vulnerability prioritization models based on risk, exposure, and asset criticality.
- Develop secure configuration baselines and monitoring processes based on CIS Benchmarks.
- Ensure compliance with patching timelines and federal vulnerability directives.
- Collaborate with infrastructure, application, and security teams to validate remediation actions.
- Support preparation of reports for leadership and federal oversight bodies.
- Develop KPI metrics for vulnerability and compliance gap closure rates, asset risk scoring, and compliance tracking.
Requirements
- Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY and maintain an active HHS/NIH clearance are preferred.
- Minimum of THREE (3) years of cybersecurity or IT risk management experience, candidates with experience focused on vulnerability management and/or secure configuration are preferred.
- Minimum of a Bachelors Degree is required.
- Tools: Hands-on experience with Tenable.
- Knowledge: Deep understanding of HIPAA and cybersecurity frameworks.
- Soft Skills: Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines.
- Experience with ServiceNow or Splunk Security Essentials.
- Experience supporting security hardening of infrastructure supporting EHR systems.
What Would Be Nice To Have:
- Certifications: Active CompTIA Security+ CE preferred. Other certifications (CISSP, CEH, or cloud-related) are a plus.
- Familiarity with ServiceNow or Splunk Security Essentials.
- Knowledge of MITRE ATT&CK framework and vulnerability prioritization methodologies (e.g., EPSS, CVSS v3).
- Prior experience within a federal or HHS environment.
Benefits & conditions
The annual salary range for this position is $98,000.00-$163,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.
What We Offer:
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:
- Medical, Rx, Dental & Vision Insurance
- Personal and Family Sick Time & Company Paid Holidays
- Position may be eligible for a discretionary variable incentive bonus
- Parental Leave and Adoption Assistance
- 401(k) Retirement Plan
- Basic Life & Supplemental Life
- Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
- Short-Term & Long-Term Disability
- Student Loan PayDown
- Tuition Reimbursement, Personal Development & Learning Opportunities
- Skills Development & Certifications
- Employee Referral Program
- Corporate Sponsored Events & Community Outreach
- Emergency Back-Up Childcare Program
- Mobility Stipend
About Guidehouse
Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.
Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.