Cyber Security Analyst

$77,840 - $122,000/Yr

Blue Cross Blue Shield Kansas - Topeka, KS

Full-time - Mid Level

Hybrid - Topeka, KS

About the position

The Vulnerability Management/Risk Analyst is a technical role within the cybersecurity defense team, responsible for managing the lifecycle of the vulnerability management program. This position requires a solid understanding of information security, applications, operating systems, networking, and cloud infrastructure, along with knowledge of attacker tactics. The analyst will communicate vulnerabilities and risks across the organization, lead patch management efforts, and support remediation initiatives to enhance the organization's security posture.

Responsibilities

• Communicate directly with all areas of the company regarding vulnerabilities and risk and work together to find a resolution.
• Lead monthly patch management meetings and follow up meetings ensuring patches for servers and endpoints are being implemented.
• Prioritize vulnerability remediation based on criticality, exploit probability, rating and business risk exposure.
• Work closely with infrastructure teams to advise and support remediation efforts to close vulnerability exposure to new threats in the wild and verify the organization's security posture against them.
• Serve as a point of contact for new and existing vulnerability-related issues.
• Manage vulnerabilities across applications, endpoints, databases, networking devices, and mobile, cloud and third-party assets.
• Document, prioritize and formally report asset and vulnerability state, along with remediation recommendations and validation.
• Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.

Requirements

• High school diploma/GED required.
• Bachelor Degree or completion of a Computer Science Program from a Technical Trade School is preferred.
• Minimum of two years' experience in I.T. infrastructure and/or application development is required.
• Bonus if you have Security related certifications such as OSCP, CISSP, CRTP, GCTI, GIAC, GCIH, GCFA, GCIA, GPEN, GNFA, GCUX, CEH, Security+ also preferred.

Nice-to-haves

• Hands-on work in technologies such as Vulnerability Scanners, Pen Testing tools, Cyber Security Rating tools, Network Detection and Response (NDR), Third Party Risk Assessment Tools, and Firewalls.

Benefits

• Incentive pay program (EPIP)
• Health/Vision/Dental insurance
• 6 weeks paid parental leave for new mothers and fathers
• Fertility/Adoption assistance
• 2 weeks paid caregiver leave
• 5% 401(k) plan matching
• Tuition reimbursement
• Health & fitness benefits, discounts and resources