Network Security Analyst - IS - Data Security - FT - Day

University of California, Irvine•Orange, CA

About The Position

The Network Security Analyst is a senior-level individual contributor reporting to the Data Security Manager, with a dotted line to the Network team. The role designs, implements, and operationalizes UCI Health’s network security posture and serves as a subject matter expert in network perimeter security, firewall governance, network access control (NAC), data center segmentation, and network-layer compliance across the UCI Health System. As a technical leader, the analyst applies advanced IT security concepts and UCI Health objectives to resolve broad, highly complex issues. The work requires in-depth evaluation of variable factors and selection of appropriate methods, techniques, and evaluation criteria. The position functions with a high degree of autonomy in a complex academic medical center environment.

Requirements

Working knowledge of network segmentation strategies, including VLAN design, firewall zoning, and Software-Defined Access (SDA).
Working knowledge of cloud network security concepts, including virtual network segmentation, cloud-native security groups, and cloud NGFW or SASE models, in coordination with infrastructure and cloud teams.
Proficiency with TCP/IP networking, routing protocols (BGP, OSPF), VPN technologies (IPsec, SSL), and DNS/DHCP architecture.
Minimum 5 years of progressive network security experience, including at least 2 years in a healthcare or regulated industry environment.
In-depth knowledge of computer hardware, software, and network security issues and approaches in healthcare environments, including Epic EHR integrations, medical device network requirements, and biomedical systems; demonstrated knowledge of secure hardware, software, and network design techniques.
In-depth knowledge of the NIST Cybersecurity Framework, NIST SP 800-53, NIST SP 800-82 (ICS/medical devices), and Zero Trust Architecture (NIST SP 800-207).
Demonstrated experience managing enterprise next-generation firewalls, such as Palo Alto Networks PAN-OS or Cisco Firepower/FTD.
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or an equivalent combination of education and experience.
Advanced knowledge of UCOP Information Security Policy IS-3 and applicable UC Health supplemental standards, including technical safeguard requirements derived from the HIPAA Security Rule (45 CFR §164.312) as applied to network infrastructure.
Advanced interpersonal skills to work effectively with technical and non-technical personnel at various organizational levels, and broad knowledge of other areas of IT.
Advanced experience using IT security systems and tools, including SIEM platforms, IDS/IPS, and network detection and response (NDR) tools; demonstrated skill in analyzing and preventing high-complexity security incidents.
Must be able to provide proof of work authorization.

Nice To Haves

Palo Alto Networks Certified Network Security Engineer (PCNSE) or equivalent next-generation firewall vendor certification.
Familiarity with UC systemwide IT security policies (UCOP IS-3) and UC Health cybersecurity initiatives.
Exposure to healthcare IoT/OT security frameworks and medical device segmentation strategies.
Experience supporting Joint Commission, CDPH, or CMS compliance activities requiring network security evidence.
Experience with Cisco DNA Center / Catalyst Center and SD-Access policy enforcement.
Cisco Certified CyberOps Professional or CCNP Security certification.
Certified Information Systems Security Professional (CISSP).