Sr. II Security Analyst - Vulnerabilities

NYU Langone Health • New York, NY

8d • $97,590 - $142,988

About The Position

We have an exciting opportunity to join our team as a Sr. II Security Analyst - Vulnerabilities. In this role, the successful analyst will be part of the Penetration Testing and Vulnerabilities Management team. The group is an agile team that effectively test and manage security vulnerabilities for the Medical Center. As a member of the team, the analyst will review a large volume of security event data from a variety of sources with the goal of identifying vulnerabilities and following up with remediation.

Requirements

• Bachelor's degree from an accredited college/university
• Minimum 6 years of progressive experience in IT security policy and compliance management programs for healthcare or academic medical centers; interaction with and support of clients; risk management and other GRC responsibilities within a large healthcare organization.
• Demonstrated experience with IT security governance, security education, security scorecards, and ability to work under aggressive deadlines with competing priorities.
• Qualified candidates must be able to effectively communicate with all levels of the organization.

Nice To Haves

• Master's degree from an accredited college/university preferred

Responsibilities

• Run weekly and on-demand vulnerability scan with Rapid7(InsightVM)
• Perform data analysis and report based on preset criteria
• Proactively discover and enumerate vulnerabilities that may not be caught by our scanning tool (e.g. devices default passwords and open Windows shares)
• Coordinate remediation efforts with infrastructure teams and application owners
• Analyze threat intelligence reports, write risk analysis report for zero-day critical vulnerabilities
• Write custom scripts and macros to accomplish and/or automate tasks as needed
• Work with infrastructure and all other stakeholders to remediate/mitigate vulnerabilities
• Work with stakeholders to harden equipment, operating systems and applications
• Using Checkmarx, work with development teams to improve app security via secure coding practices
• Manage 30+ servers that fall under our group's purview (InsightVM, Checkmarx), including daily maintenance, patch and upgrade
• Conduct security product evaluation and recommendation
• Propose and draft security standards
• Work tickets assigned to IT Security in Ivanti ticketing system

Benefits

• financial security benefits
• a generous time-off program
• employee resources groups for peer support
• holistic employee wellness program, which focuses on seven key areas of well-being: physical, mental, nutritional, sleep, social, financial, and preventive care.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior