Cybersecurity Analyst, Senior

Acentra Health, LLC•UNAVAILABLE, UNAVAILABLE

About The Position

Acentra Health is seeking a Senior Cybersecurity Analyst to help track and brief the security status of cloud service provider systems. As part of a team, the analyst contributes to writing and reviewing security documentation for cloud products and environments, meets with engineers and system administrators to review security guidelines, and performs security audit and compliance tasks for cloud applications. The role also provides guidance to system administrators conducting remediation and manages small projects by running meetings with customers and vendors. The analyst establishes and implements Authority to Operate (ATO) processes in accordance with FedRAMP High guidelines and HIPAA requirements, and applies the NIST 800-53 version 5 framework to security controls and plans. The role analyzes cloud architecture security posture and vulnerabilities, maintains technical security documentation, prepares customer deliverables, and supports investigations of suspected incidents with the SIEM team. It also acts as a liaison between program managers and senior leaders by providing technical documentation, incident reports, examination findings, summaries, and other situational awareness information. The position requires a bachelor's degree or higher in an information technology-related field, an active qualifying security certification, extensive experience applying IT security controls, experience with federal security processes, and the ability to obtain and maintain a public trust security clearance. The listed annual pay range is USD $98,960 to $136,000.

Requirements

Bachelor's degree or higher from a US Department of Education-accredited college or university in an information technology-related field.
An active certification in at least one of the following: CISSP, CISM, CISA, CompTIA Security+, CAP, or GSEC.
At least 10 years of experience applying information technology security controls.
At least 2 years using federal processes, procedures, and standards to implement information technology security controls, such as NIST Special Publications, FIPS, FISMA, or DHS Policy Directive 4300A.
Knowledge of federal security policy documentation, including POA&Ms, SOPs, contingency plans, and SSPs.
Experience providing system-related input on cybersecurity requirements for statements of work and other procurement documents.
Experience analyzing and updating security plans, policies, and procedures to align with cybersecurity laws, regulations, and organizational cyber objectives.
Experience developing related system designs to enhance cybersecurity controls, reduce vulnerabilities, mitigate risks, and develop remediation plans to harden security systems.
Must be a US citizen and resident, and must have resided in the US for 3 of the last 5 years.
A public trust security clearance is required; failure to achieve and maintain the clearance disqualifies the selected candidate.

Responsibilities

Track and brief the security status of cloud service provider systems.
Write and review security documentation concerning the security status of cloud products and environments.
Meet with engineers and system administrators to review security guidelines.
Perform security audit and compliance tasks for cloud applications.
Provide guidance to system administrators performing remediation activities.
Manage small projects by running meetings with customers and vendors.
Understand, establish, and implement Authority to Operate (ATO) for systems in accordance with FedRAMP High guidelines and the HIPAA rule.
Apply knowledge of the NIST 800-53 v5 framework to execute security controls and plans.
Serve as a liaison between program managers and senior leaders, providing technical documents, incident reports, computer examination findings, summaries, and other situational awareness information.
Analyze security posture and vulnerabilities in cloud architecture systems.
Update and review technical security documentation, including system security, incident response, and contingency plans.
Prepare customer deliverables as required by contract.
Assist the SIEM team with investigations of suspected incidents and complete customer notifications according to contractual obligations.