Programmer Analyst Info Security

At Stony Brook Medicine the Program Analyst Information Security is an entry-level position responsible for supporting the organization’s information security program. This role assists with monitoring security events, responding to incidents, reviewing potential security risks, supporting compliance efforts, promoting security awareness, and helping protect the confidentiality, integrity, and availability of organizational data and systems., Duties of a Programmer Analyst Info Security may include the following but are not limited to:

• Monitor and triage security alerts from various security tools and platforms.
• Assist with investigating suspicious activity, phishing reports, and potential security incidents.
• Support user account security reviews, access management, and identity protection efforts.
• Assist with vulnerability management activities, including tracking remediation efforts.
• Review and document security events, incidents, and operational procedures.
• Support compliance initiatives, audits, and security assessments.
• Help maintain security documentation, standards, and procedures.
• Assist with security awareness and training activities for employees.
• Research emerging threats, vulnerabilities, and cybersecurity best practices.
• Work closely with Information Technology and business teams to address security concerns.
• Participate in security projects and other duties as assigned.
• Understanding cybersecurity threats including phishing, malware, ransomware, and social engineering.
• Ability to analyze information and identify potential security concerns.
• Strong attention to detail and documentation skills.
• Customer-service mindset with the ability to interact professionally with staff at all levels.
• Commitment to maintain confidentiality and handling sensitive information appropriately., * All Hospital positions may be subject to changes in pass days and shifts as necessary.
• This position may require the wearing of respiratory protection, which may prohibit the wearing of facial hair.
• This function/position may be designated as “essential.” This means that when the Hospital is faced with an institutional emergency, employees in such positions may be required to remain at their work location or to report to work to protect, recover, and continue operations at Stony Brook Medicine, Stony Brook University Hospital and related facilities.

Prior to start date, the selected candidate must meet the following requirements:

• Successfully complete pre-employment physical examination and obtain medical clearance from Stony Brook Medicine’s Employee Health Services *

• Complete electronic reference check with a minimum of three (3) professional references.

• Successfully complete a 4 panel drug screen *

• Meet Regulatory Requirements for pre-employment screenings.
• Provide a copy of any required New York State license(s)/certificate(s).

Failure to comply with any of the above requirements could result in a delayed start date and/or revocation of the employment offer.

*The hiring department will be responsible for any fee incurred for examination .

The ideal candidate is eager to learn, possesses strong problem-solving skills, and has an interest in cybersecurity, technology, and risk management., * Associate degree in Cybersecurity, Information Technology, Computer Science, or a related field

• 2 years of experience in Information Security or an IT related field
• Basic understanding of information security principles and best practices.
• Familiarity with Microsoft Windows, Microsoft 365, networking concepts, and common security technologies.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities and work independently as well as part of a team., * Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Familiarity with Microsoft Defender, Entra ID (Azure AD), or similar security platforms.
• Exposure to security frameworks such as NIST, CIS Controls, HIPAA, or ISO 27001.
• Industry certifications such as Security or Network

The starting salary range (or hiring range) for this position is - $xxx - $xxx / year.

The above salary range represents SBUH’s good faith and reasonable estimate of the range of possible compensation at the time of posting. The specific salary offer will be based on the candidate’s validated years of comparable experience. Any efforts to inflate or misrepresent experience are grounds for disqualification from the application process or termination of employment if hired.

Some positions offer annual supplemental pay such as:

• Location pay for UUP full-time positions ($4000)

Your total compensation goes beyond the number in your paycheck. SBUH provides generous leave, health plans, and state pension that add to your bottom line.