SOC Security Analyst

University of Miami•Miami, FL

1d•Onsite

About The Position

The University of Miami Health System, "UHealth", Information Technology Department has an exciting opportunity for a full-time SOC Security Analyst for our 24/7/365 Security Operations Center (SOC) in Miami, Florida. The SOC Security Analyst conducts computer forensic investigations, data recovery, and electronic discovery. Additionally, the incumbent maintains systems to protect data from unauthorized users. An employee in this position identifies, reports, and resolves security violations. Meets with clients and managerial personnel to determine and define specific security management requirements. Evaluates the effectiveness and efficiency of existing security control measures, identifies vulnerabilities that may cause inappropriate/accidental access or destruction/disclosure of information, and establishes security controls to eliminate or minimize exposure. Maintains training and awareness programs to ensure owners and clients are aware of their responsibilities. Attends human resources orientation to ensure security awareness is explained. Provides organization-wide security consulting services. Documents all inquiries relating to any perceived or alleged security breach. Performs research on new and improved ways to properly protect the organization’s information assets. Performs established auditing and monitoring analysis to verify compliance with established security policies. Advises information asset owners of recommended control measures and presents reports on who has access to the data. Oversees the day-to-day access functions performed by security coordinators. Adheres to University and unit-level policies and procedures and safeguards University assets.

Requirements

Understanding of cybersecurity fundamentals
Familiarity with security tools like firewalls , DUO , Crowdstrike
Knowledge of networking protocols and ability to analyze security incidents
Strong problem solving skills and attention to detail
Ability to communicate finidings effectively
Obtain CompTIA Security + certification within six months of hire
Bachelor’s Degree in relevant field
Certification in relevant field such as Security+, GSEC preferred
Ability to work rotating or irregular shifts ( 8am to 4:30pm, 4pm to 12:30am, 12am to 8:30am, holidays and weekends.
Minimum 3 years of experience, with at least 2 years preferably in higher education, healthcare, or a healthcare-related organization working in a Cybersecurity Operations Center or Cybersecurity Incident Response Team.
Experience collecting, organizing, and analyzing data gathered from SIEM, IPS, NAC, vulnerability scanners, network scanners, log aggregation tools preferred
Ability to recognize, analyze, and solve a variety of problems.
Ability to exercise sound judgment in making critical decisions.
Any appropriate combination of relevant education, experience and/or certifications may be considered.

Responsibilities

Conducts computer forensic investigations, data recovery, and electronic discovery.
Maintains systems to protect data from unauthorized users.
Identifies, reports, and resolves security violations.
Meets with clients and managerial personnel to determine and define specific security management requirements.
Evaluates the effectiveness and efficiency of existing security control measures
Identifies vulnerabilities that may cause inappropriate/accidental access or destruction/disclosure of information
Establishes security controls to eliminate or minimize exposure.
Maintains training and awareness programs to ensure owners and clients are aware of their responsibilities.
Attends human resources orientation to ensure security awareness is explained.
Provides organization-wide security consulting services.
Documents all inquiries relating to any perceived or alleged security breach.
Performs research on new and improved ways to properly protect the organization’s information assets.
Performs established auditing and monitoring analysis to verify compliance with established security policies.
Advises information asset owners of recommended control measures and presents reports on who has access to the data.
Oversees the day-to-day access functions performed by security coordinators.
Adheres to University and unit-level policies and procedures and safeguards University assets.