Sr. Security Analyst- FT- Days- Information Security

The Senior Security Analyst supports the Information Security program by monitoring, assessing, and responding to cybersecurity threats, vulnerabilities, and risks across the organization. This position acts as a technical and operational bridge between daily security operations and strategic initiatives. The Senior Security Analyst assists in designing, implementing, and maintaining effective security controls, supporting incident response, and performing risk and vulnerability assessments. The role requires analytical expertise, collaboration across IT and clinical departments, and the ability to translate complex security findings into actionable risk mitigation strategies., * Monitor network, application, and system logs for indicators of compromise (IOCs) and anomalous activity.

• Investigate, contain, and remediate cybersecurity incidents under the guidance of the Information Security Officer.
• Perform and document vulnerability assessments, risk analysis, and coordinate remediation with system owners.
• Maintain and tune SIEM and endpoint protection systems to ensure optimal detection and response capability.
• Participate in security awareness and training initiatives for staff.
• Review and recommend improvements to access control policies and configurations in Active Directory, VPNs, and key applications.
• Assist in security reviews for new systems, vendors, and integrations.
• Support configuration and change management processes for security devices and applications.
• Conduct periodic threat modeling and assist in updating organizational risk registers.
• Collaborate with Infrastructure and Application teams to embed security best practices in system designs and patch management.
• Generate regular security posture and incident trend reports for management review.
• Contribute to the development and refinement of security policies, standards, and procedures.Support compliance audits and respond to audit findings related to information security., Must be able to assist other employees with lifting more than 20 lbs.

• Bachelor’s degree in information security, Computer Science, Information Systems, or a related field preferred.

• Minimum 4-6 years of progressive experience in information security, system administration, or cybersecurity operations.

• Experience in healthcare IT environments preferred.

• Hands-on experience with security monitoring tools (SIEM, IDS/IPS, endpoint protection, vulnerability management).

• Familiarity with TrendMicro, CrowdStrike, or similar endpoint protection technologies.

• Working knowledge of firewalls, Active Directory, identity, and access management (IAM), and network segmentation.

• Understanding of incident response procedures, forensic analysis, and log correlation.

• Knowledge of security frameworks and standards such as HIPAA, HITECH, NIST, ISO27001, and PCI-DSS.

• Excellent analytical, problem-solving, and communication skills.

• Security certifications (e.g., Security+, CEH, CySA+, CISSP Associate) preferred.

• Some evening or weekend work will be required.

JOB KNOWLEDGE/EXPERIENCE :

· Must be experienced with active directory and have a solid technical background

· Understanding of Access Controls

· Understands existing identity data in the different systems and determine ways to integrate into IdM or Active Directory

· Understanding of industry accepted standards

· Understands identity management processes and identify opportunities to automate additional functions within the company

· Understanding of governance/ access certification

· Understanding of Federation standards and SSO concepts

· Knowledge of Power Shell, SQL programming, understanding of Web Services standards

· Knowledge of Active Directory (security model, LDAP protocol, and administrative tools)

· Knowledge of Exchange Server (email configuration, mailbox management, and mailbox creation)

· Knowledge of SQL Server (database/table/view definitions, backup/restore, performance tuning, Employees must be able to demonstrate the knowledge and skills necessary to provide care appropriate to the age of the patients served in his/her assigned unit. The individual must demonstrate knowledge of principles of growth and development over the life span and possess the ability to assess data reflective of the patient’s status and interpret the appropriate information needed to identify each patient’s requirement relative to his or her age., Ability to read and write

Yes

Ability to Count

Yes

Ability to hear verbal communication without aid

Yes

Operating Personal Vehicle

Yes

Ability to comprehend written/verbal communication

Yes

Other: Ability to deal with stress

Yes

OSHA Category

III

B. Working Conditions : The individual spends over 95% of his/her time in an air-conditioned environment with varying exposures to noise. There is protection from weather conditions but not necessarily from temperature changes. The position does have low exposure to malodorous, infectious body fluids from patients and some minimal exposure to noxious smells from cleansing agents.

C. Occupational Exposure: This position has minimal to no exposure to blood, body fluids, or tissues and is an OSHA Category III (although situations can be imagined or hypothesized under which anyone, anywhere, might encounter potential exposure to body fluids). Person who performs these duties are not called upon as part of their employment to perform or assist in emergency medical care or first aid or to be potentially exposed in some other way.

D. Aptitudes : HIGH 1 2 3 4 5 6 LOW

Intelligence: General learning ability: The ability to “catch on” or understand instructions and underlying principles. Ability to reason and make judgments. 3

Verbal: Ability to understand meanings of words and ideas associated with them, and to use them effectively. To comprehend language, to understand relationships between words, and to understand meanings of whole sentences and paragraphs. To present information or ideas clearly. 3

Numerical: Ability to perform arithmetic operations quickly and accurately. 2

Spatial: Ability to comprehend forms in space and understands relationships of plane and solid objects. Frequently described as the ability to “visualize” objects or two or three dimensions, or to think visually of geometric forms. 2

Form Perception: Ability to perceive pertinent details and objects or in pictorial or graphic material to make visual comparisons and discriminations and see slight differences in shapes and shadings of figures and widths and lengths of lines. 3

Clerical Perception: Ability to receive pertinent details and verbal or tabular material. To observe differences in copy, to proofread words and numbers, and to avoid perceptual errors in arithmetic computation. 2

Motor Coordination: Ability to coordinate eyes and hands to fingers rapidly and accurately in making precise movements with speed. Ability to make a movement response accurately and quickly. 3

Finger Dexterity: Ability to move hands easily and skillfully. To work with fingers in placing and turning motions. 3

Manual Dexterity: Ability to move hands easily and skillfully. To work with hands in placing and turning motions. 3