Security Analyst

Center For Health Information And Analysis • Boston, MA

1d • $75,826 - $125,924 • Hybrid

About The Position

The Center for Health Information and Analysis (CHIA) is seeking a Security Analyst to support its Information Security applications, provide Cybersecurity metrics and reports, and contribute to CHIA’s secure cloud environment. This role will continuously improve CHIA’s Cybersecurity program and security processes, with potential to evolve into a security engineer role. Responsibilities include participation in IT audits and risk assessments, CSIRT duties, documentation production, security product research, vendor management, and other assigned duties. The position reports to the Deputy Chief Information Security Officer (Deputy CISO).

Requirements

• Security Analyst I: At least one (1) year of full-time or equivalent part-time professional or practical experience in the field of information technology security, or any equivalent combination of the required experience and substitutions.
• Security Analyst II: At least two (2) years of full-time or equivalent part-time professional or practical experience in the field of information technology security, or any equivalent combination of the required experience and substitutions.
• An associate’s degree in a related field may substitute for the required experience (for Security Analyst I).
• An Associate’s degree in a related field may substitute for one (1) year of the required experience (for Security Analyst II).
• A Bachelor’s degree or higher in a related field may substitute for the required experience (for Security Analyst II).

Nice To Haves

• Strong experience in information assurance, Cybersecurity, systems analysis, IT audit, or related specialization, or commensurate higher education.
• High level of proficiency in reading and writing English.
• Microsoft Enterprise technologies such as Active Directory and Microsoft 365.
• Microsoft Azure security, connectivity, and network components.
• In-depth knowledge of network security and firewall technologies, including but not limited to, Cisco and Palo Alto.
• Understanding of HIPAA compliance requirements.
• Recognizes opportunities for addressing IT issues, risks, and exposures.
• Maintains strong liaison and working relationships.
• Works efficiently and diligently to resolve security problems and help desk tickets.
• Accepts responsibility and personal accountability.
• Possesses strong interpersonal skills.
• Writes clear and concise documentation and procedures.

Responsibilities

• Work with CHIA’s various IT departments to secure network, application, and database infrastructure and tools in the cloud.
• Continuously look for ways to harden and protect CHIA’s assets.
• Mine metrics from security infrastructure (applications, databases, network appliances, servers), aggregate, and normalize to facilitate reporting on enterprise security.
• Coordinate and generate cyber security related reports, alarms, and notifications; Identify reporting gaps and take appropriate steps to remediate.
• Administer privileged/trusted monitoring of agency computers and IT systems at the direction of the CISO or CIO.
• Support the execution of risk assessments, vulnerability and threat assessments, incident response, and cyber security awareness.
• Perform threat research and leverage it to improve the effectiveness of our safeguards and defense-in-depth strategy.
• Stay current with cyber security trends, best practices, and developments on topics such as emerging threats, containment and eradication of malware, and incident response, and act as a team resource for this information.
• Support the CISO in auditing systems, user accounts, databases, and applications for policy compliance, e.g. least privilege, appropriate security controls, timely security patching, unique user accounts.
• Analyze malware infections and recommend improvements to anti-malware technology, tactics, or procedures where applicable.
• Participate in annual employee training sessions to improve Cyber Security awareness throughout the agency.
• Perform regular maintenance operations on primary Security systems/applications to keep them patched and current.
• Vet new software before it is introduced into CHIA’s production network.
• Support the configuration of security components, connectivity and networks in CHIA’s cloud computing environment.

Benefits

• 75% state paid medical insurance premium
• Reasonable Dental and Vision Plans
• Flexible Spending Account and Dependent Care Assistance programs
• Low cost basic and optional life insurance
• Retirement Savings: State Employees' Pension and a Deferred Compensation 457(b) plan
• 11 paid holidays per year
• Competitive Sick, Vacation and Personal Time
• Tuition Benefit for employee and spouse at state colleges and universities

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree