Information Security Analyst (Red Team)

Point32Health • Canton, MA

2d • $91,189 - $136,783 • Hybrid

About The Position

This position is responsible for simulating real-world cyber threats to evaluate the effectiveness of the organization's security controls, detection capabilities, and response processes. This role conducts adversary emulation, penetration testing, social engineering assessments, and security exercises to identify vulnerabilities, improve the organization's overall security posture, validate security investments, and reduce cyber risk. Reporting to the Cybersecurity Manager, the Security Analyst will work closely with IT teams across all threads where security applies.

Requirements

• Bachelor’s degree in computer science with emphasis on IT security required or equivalent experience.
• 3-5 years of professional experience
• Specific working knowledge of and experience in the following work environments:
• Identity and Access Management
• SailPoint Identity Management
• PingFederate
• SiteMinder/Identity Manager/Provisioning Manager
• CyberArk PAM
• Cloud security
• Active Directory
• LDAP Directory Services
• Perl, Python, VBS and Java.
• Vulnerability scanning and management
• Intrusion Detection/Prevention System
• Virus & malware protection
• Advanced Threat Protection
• Public Key Infrastructure
• Data Loss Prevention
• Microsoft O365
• Firewalls
• VPN
• Forensics
• Mobile application security
• Operational data stores, data marts, data warehouse
• Security Information and Event Management (SIEM)
• N-tiered infrastructure patterns
• Windows and UNIX operating system environments
• Web portal technology and application servers, i.e. Apache Tomcat, WebLogic, WebSphere
• Data/Computer Operations technology integration and support
• CRM solutions/Salesforce
• Excellent communications skills both written and oral

Nice To Haves

• Master’s degree
• 5-7 years of progressive experience in information services including 3 years in systems security, including maintenance and use of security products in a distributed enterprise environment, and experience in compliance with federal security regulations.

Responsibilities

• Consult with Security and Infrastructure Services staff to evaluate and implement software systems that provide appropriate security.
• Communicate potential security exposures, misuse, or noncompliance situation to appropriate managers.
• Monitor security logs to identify potential security related events. Capture and report security metrics.
• Monitors security trends and assess potential uses of new technologies to meet identified business goals.
• Analyze business requirements and risks to technology implementation for security-related issues.
• Develop and produce systems monitoring and metrics reports and assess the content.
• Work with Technical Writers to document and review security policy and procedures.
• Participate in audits both internal and external as required.
• As required, participate on project teams, and manage the completion of all assigned project related tasks.
• Train information owners in the implementation of necessary security controls by developing and presenting information security awareness.
• Other duties as assigned

Benefits

• Medical, dental and vision coverage
• Retirement plans
• Paid time off
• Employer-paid life and disability insurance with additional buy-up coverage options
• Tuition program
• Well-being benefits
• Full suite of benefits to support career development, individual & family health, and financial health

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level