Cyber Security Analyst III

AnMed•Anderson, SC

About The Position

This senior-level role requires greater knowledge, training, and/or experience than level 2, with less review and supervision and work of greater complexity or variety. The analyst typically has experience and advanced specialized training, works on their own initiative, and requires little supervision. They perform all duties of a Cybersecurity Analyst 2 and serve as the primary analyst for multiple systems and backup for others. The position includes specialized assignments involving phishing, physical access, camera systems, user activity monitoring, forensic investigations, endpoint protection, insider threat monitoring, Security Operations Center (SOC) duties, audits, vulnerability management, and authorized-access monitoring. The analyst provides guidance to lower-level analysts and assists in developing and disseminating security policies and procedures. They coordinate security matters with the Information Services Security team, the Chief Information Security Officer (CISO), and the Corporate Compliance Officer. Working with enterprise systems, software, and tools, they help maintain the confidentiality, integrity, and availability of business and electronic health record data, conduct periodic full system audits of user access, and perform security analyst functions using security software and tools. At the specialized level, the analyst handles major incidents escalated by incident responders; performs or supervises vulnerability assessments and penetration tests; proactively identifies potential threats, security gaps, and vulnerabilities; and recommends improvements to security monitoring tools. They review critical security alerts and threat intelligence provided by tier 1 and tier 2 analysts, lead complex investigations and incident responses, and conduct threat hunting and forensic analysis.

Requirements

At least 4 years of related experience in information systems security or security analyst/auditor roles.
Must obtain and maintain at least one cybersecurity certification.
Prefer 2 years of college, preferably in Computer Science, Cybersecurity, or Information Technology; significant experience may substitute for formal training.

Nice To Haves

A cybersecurity certification such as Security+ or CISSP is preferred.

Responsibilities

Monitor access to systems, departments, users, and outside entities that have submitted the required paperwork.
Ensure users of business and clinical applications receive adequate security.
Maintain, update, and create security documentation and forms used by management to requisition user security access.
Maintain and monitor endpoint protection and other systems to discover anomalies.
Maintain and monitor email phishing campaigns, follow up on replies, requests, and failures, and ensure remediation training is completed.
Maintain and monitor email security systems.
Use the security stack of tools to ensure security operations are performed according to assigned tasks.
Work with physical access employees to ensure critical systems are backed up.
Work with departmental staff to help reduce vulnerabilities identified by system tools.
Work with the Security Event and Incident Management (SIEM) analyst to monitor system anomalies.
Respond to threat intelligence alerts and ensure appropriate teams are notified for remediation or action.
Investigate suspected security violations.
Handle major incidents escalated by incident responders.
Perform or supervise vulnerability assessments and penetration tests to identify possible attack vectors.
Proactively identify potential threats, security gaps, and vulnerabilities.
Recommend ways to optimize deployed security monitoring tools as knowledge of potential threats develops.
Review critical security alerts, threat intelligence, and other security data provided by tier 1 and tier 2 analysts.
Lead complex investigations and incident responses, and perform threat hunting and forensic analysis.
Provide guidance to level 1 and level 2 Cybersecurity Analysts.
Assist in developing and disseminating security policies and procedures, and coordinate security issues with the Information Services Security team, the CISO, and the Corporate Compliance Officer.
Work with enterprise systems, software, and tools to maintain the confidentiality, integrity, and availability of business and electronic health record data.
Perform periodic full system audits of user access within business and clinical application systems.
Provide security analyst functions using security software and tools.