Information Security Analyst

Highmark Health

1d • $67,500 - $126,000 • Onsite

About The Position

JOB SUMMARY CANDIDATE MUST BE US Citizen (due to contractual/access requirements) This role is responsible for implementing and administering information security policies and procedures, as well as developing and maintaining information systems to enforce those policies. The incumbent will actively engage in threat hunting, SIEM engineering, log source onboarding, and detection engineering, alongside conducting investigations into potential and existing security threats. Key responsibilities include enforcing security policies, ensuring compliance, troubleshooting security issues, participating in and remediating purple team exercises, and providing advanced incident response support. Additionally, this position evaluates security risk assessments, presents security information to diverse audiences, assists with MSSP vendor management, and supports the workforce with security-related inquiries and problems, all while ensuring compliance with relevant security standards.

Requirements

• 3 - 5 years of experience with Information Security and Systems Analysis
• 3 - 5 years of experience with Information Security and/or Information Risk Management and/or Information Technology
• 3 - 5 years of experience with Information Security Governance, Risk and/or Compliance functions and activities
• 3 - 5 years of experience developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
• 3 - 5 years of experience with technologies such as Intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), and virtualization platforms
• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
• Knowledge of NIST Risk Assessment methodology
• Familiarity with secure SDLC best practices
• Knowledge of Microsoft Apps and Suites, Windows server, SharePoint, etc.
• Strong teamwork and inter-personal skills
• US Citizen (due to contractual/access requirements)
• Bachelor’s Degree - Information Security, Information Systems, Information Assurance, Computer Science or related field

Nice To Haves

• 5 - 7 years of experience with information security and systems analysis
• Experience working within an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
• Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits
• IT/information security risk advisory experience
• Governance Risk and Compliance (GRC) tool experience such as ARCHER
• In-depth understanding of network security architecture, network and networking protocol
• Certified Information Systems Security Professional (CISSP)
• Security+

Responsibilities

• Perform operational support of information security technology.
• Perform analysis and resolve problems regarding information security.
• Complete project tasks to enable the on time, within budget and scope delivery of information security projects.
• Present new and existing information security information to workforce and management.
• Assist in incident response procedures.
• Assist Change Management.
• Assist in conducting application risk assessments against Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry (PCI).
• Assure compliance to required standards, procedures, guidelines and processes.
• Other duties as assigned or requested.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level