Cyber Security Analyst II

AnMed•Anderson, SC

About The Position

The Cyber Security Analyst II is an intermediate-level role requiring greater knowledge, training, and/or experience than a level 1 position. The role involves moderately greater work complexity and variety, typically requires specialized training and experience, and operates under the employee’s own directives with general supervision. The analyst performs the duties of a Cybersecurity Analyst I and is expected to learn many systems, serve as the primary analyst for one system, and provide backup coverage for other systems. The position supports a range of security assignments, including phishing, physical access and camera systems, user activity monitoring, forensic investigations, endpoint protection, insider-threat monitoring, Security Operations Center (SOC) duties, audits, vulnerability management, and monitoring authorized access. The analyst helps develop and distribute security policies and procedures and coordinates security issues with the Information Services Security team, the Chief Information Security Officer, and the Corporate Compliance Officer. Working with enterprise systems, software, and tools, the analyst helps maintain the confidentiality, integrity, and availability of business and electronic health record data, conducts periodic full-system audits of user access, and performs security analyst functions using security software and tools.

Requirements

Two or more years of related experience in information systems security or security analyst/auditor roles.
Must obtain and maintain at least one cybersecurity- or system-relevant certification.

Nice To Haves

Two years of college, preferably in Computer Science, Cybersecurity, or Information Technology; significant experience may substitute for formal training.
Security+, CISSP, or another relevant certification is preferred.

Responsibilities

Monitor access to systems, departments, and users, including outside entities that have submitted the required paperwork.
Ensure adequate security for users of business and clinical applications.
Maintain, update, and create security documentation and forms used by management to requisition user security access.
Maintain and monitor endpoint protection and other systems to identify anomalies.
Maintain and monitor email security systems.
Create and update email phishing campaigns, follow up on replies, requests, and failures, and ensure remediation training is completed.
Use the security tool stack to ensure security operations are performed according to assigned tasks.
Coordinate with physical access employees to ensure backup of critical systems.
Work with departmental staff to help reduce vulnerabilities identified by system tools.
Work with the Security Event and Incident Management (SIEM) analyst to monitor system anomalies.
Respond to threat-intelligence alerts and ensure appropriate teams are notified for remediation or action.
Investigate suspected security violations.
Review higher-priority security incidents escalated by triage specialists and assess them in greater depth using threat intelligence, including indicators of compromise and updated rules.
Assess the scope of attacks and identify affected systems.
Investigate and respond to verified incidents, perform event correlation, and carry out initial containment.
Assist in developing and disseminating security policies and procedures.
Coordinate security issues with the Information Services Security team, the Chief Information Security Officer, and the Corporate Compliance Officer.
Perform periodic full-system audits of user access in business and clinical application systems.
Use enterprise systems, software, and tools to help maintain the confidentiality, integrity, and availability of business and electronic health record data.