IT Security Analyst IV

Horizon Blue Cross Blue Shield of New Jersey•Newark, NJ

1d•$97,800 - $133,455

About The Position

This position is a lead security analyst within IT Security Governance and IT Security Operations. The incumbent will be responsible for the administration, monitoring, maintenance, and continuous improvement of numerous critical security technologies. In addition to maintaining day-to-day cybersecurity operations, the team is responsible for several enterprise-wide strategic initiatives.

Requirements

Minimum high school diploma or GED
Requires Bachelor's degree, preferably in Computer Science, from an accredited college or university
5 years prior IT security related work experience
Experience with IDS, IPS, ICE Engine or
Requires one or more of the following certifications: CISSP, SANS GIAC or CISA
Requires an excellent understanding of IT security concepts with an emphasis on Security and Risk Assessment
Microsoft 365 security implementation and ongoing support
Micro-segmentation initiatives to reduce lateral movement risks
AI performance, governance, and security controls
Data classification and sensitive data protection initiatives
Cloud security enhancements
Continuous vulnerability remediation efforts
Security architecture improvements aligned with organizational objectives
Perimeter Defense
Palo Alto Networks (PAN) Firewalls)
Prisma GlobalProtect VPN
Cisco Sourcefire
Cisco Stealthwatch
Cisco Identity Services Engine (ISE)
Secure Mail Gateway (ProofPoint)
Enterprise Proxy
Endpoint Protection Platforms
Data Loss Prevention (DLP)
File Integrity Monitoring (FIM)
Absolute/Computrace
Vulnerability Scanning Platforms
Disc Encryption
EDR (Crowdstrike)
Web Application Firewall (WAF)
Secure Proxy Services
Zscaler
Application Security Programs
Cloud Access Security Broker (CASB)
Cloud Security Controls
Security Information and Event Management (SIEM)
Security Monitoring and Alerting
Incident Response Activities
Threat Detection and Vulnerability Management

Nice To Haves

Prefers advanced degree in Information Security, Computer Science or related field

Responsibilities

Recommend FireWall change requests for approval
Analyze and take appropriate action on intrusion detections
Analyze and recommend action on security related incidents; notify appropriate owners and IT Security Governance
Review and approve access requests
Provide Role Based Access Control (RBAC) to individual users and perform recertification based on segregation of duties and roles
Map work flows in provisioning users into our systems and infrastructure
Comply with internal and external audit requests
Monitor the effectiveness of the Enterprise wide information security program
Provide data for audit indicating changes made to access control lists to facilitate audits and other investigations
Participate in investigating possible security violations
Track and maintain operational security access metrics
Design workflow diagrams showing the production of, transmission and use of electronic Protected Health Information (ePHI) and other sensitive information
Provide guidance and direction regarding security control elements in policies throughout the organization
Document relevant business processes and their implications on information security
Develop information security risk identification, tracking and mitigation processes strategy and methodology
Develop the information security awareness, training and education program-s strategy and methodology
Facilitate or lead development of accurate and relevant information security process and operational metrics
Establish monitoring measures to detect and ensure correction of security breaches and policy violations
Proactively keep current on information security issues related to business processes as input into departmental policies and procedures
Analyze and enhance the effectiveness of the Enterprise wide information security program.