Cybersecurity Analyst

BayCare is hiring a Cybersecurity Analyst. This challenging role serves as a core member of the IS Security and Threat management team. Our team is seeking to transform the way the Healthcare Industry approaches securing data.

Our team works cross-functionally to secure endpoints, review security configurations, provide technical expertise for Information Systems projects, scan and remediate vulnerabilities, monitor and protect against threats, respond to incidents, and leverage technology to profile assets and create content that alerts us of threats.

As a member of the IS Security & Threat Management team, members participate in a quarterly/biannual rotation of sub-functional duties: Incident Response, Project Review and Vulnerability Management, as well as Security Engineering and tools maintenance.

We are seeking technology professionals with experience in networking, firewall, incident response, command-line, APT, ransomware, and/or SIEM experience.

Candidates MUST reside in the state of Florida or be willing to relocate. This is a fully remote position; however, occasional on-site, after-hours/weekend work may be required. This role participates in a rotating on-call schedule with other IS Security and Threat team members.

Responsibilities:

Incident Response

• First line of defense in the discovery of cyber threats, characterization and attribution of those threats, creation and sharing of situational awareness, and the development of mitigation strategies.
• Use collected information (IPS, FW and network traffic logs, host/system logs, AV/EDR logs, etc) to identify, analyze, and report events that occur or might occur within the environment.
• Incident handling, triage of events, network analysis and threat detection, forensic investigations, eDiscovery and litigation, trend analysis.
• Threat hunting using less operational ready data to investigate suspicious or anomalous activity.
• Creation of new content to detect malicious activity using threat hunt information.

Security Engineering

• Track and trend system performance and maintain the health and stability of our tools and environment
• Create metrics and dashboards and reports that helps us find deviations from the norm to investigate
• Configure security solutions to protect our assets, data, and network
• Create roadmaps and implement recommendations to mature and continuously improve our security posture
• Create SOP for new features or new solutions implemented to ensure operational readiness.

Vulnerability Management and Projects

• Perform ad-hoc scans
• Manage and maintain scheduled scans
• Engage cross-functional teams to remediate vulnerabilities
• Manage to conclusion Critical Zero Day vulnerabilities
• Participate on Project calls to provide security governance, recommendations, best practices
• Ensure projects are implemented in ways that conform with security policy

Analyst Requirements

• GCIH, GSEC, or Security and Network certifications preferred.
• 3 years of Incident Response, Firewall/IPS, and/or Forensic Investigation experience is required with a Bachelor's degree.

• 7 years of related experience can be accepted with a HS Diploma/GED
  

How often will this team member be working remotely? Hybrid

Equal Opportunity Employer Veterans/Disabled