CyberSecurity Senior Analyst

$70,000 - $90,000/Yr

Partners In Health - Boston, MA

Full-time - Mid Level

Boston, MA

Ambulatory Health Care Services

About the position

The Cybersecurity Senior Analyst (CSA) plays a crucial role in enhancing and securing the organization's cybersecurity infrastructure. This position involves implementing robust security measures across both on-premise and cloud-based systems, ensuring compliance with industry standards such as the NIST Cybersecurity Framework. The CSA is a hands-on technical expert responsible for identifying security improvements and leading security initiatives within the organization, collaborating with various teams to maintain a strong security posture.

Responsibilities

• Lead technical evaluation of security technologies that address current and future needs based on emerging threats and industry trends.
• Lead the implementation of a unified identity platform and access management.
• Lead security efforts in bringing PIH in line with NIST CSF framework.
• Design improvements to the security architecture around the organizational environment, applying the principle of least privilege to improve identity and access management.
• Design, manage and maintain monitoring & alerting platform to proactively secure potential risks across the organizational landscape.
• Build automation to manage and maintain security updates across various applications, operating systems including vulnerability management.
• Manage and maintain security tools and technologies such as SIEM, EDR, IDS/IPS, firewalls, and antivirus solutions. Configure and fine-tune these tools to maximize their effectiveness in detecting and preventing threats.
• Participate in conducting gap analyses, security and risk assessments with both internal and external stakeholders.
• Coordinate with multiple departments to identify, triage, and remediate gaps in current security posture.
• Work with a variety of security efforts that span areas such as cloud infrastructure, application, system, and network level initiatives.
• Document processes and implementations across the plethora of environments and systems managed by the IT team.
• Responsible for maintaining and maturing the security posture of the organization.
• Respond to and act on security incidents and lead security audits of various platforms utilized across the organization landscape.
• Provide training and awareness programs to educate employees about cybersecurity best practices, policies, and procedures. Promote a culture of security throughout the organization.
• Other duties assigned to ensure the proper functions of the team & meet organizations needs as identified.

Requirements

• Bachelor (4-year) degree, with a technical major, such as engineering or computer science.
• Work experience in place of Bachelor degree (2 years as System Engineer or equivalent).
• 5-8 years of Information Security discipline experience.
• Experience with NIST, CIS, CMMC, ISO 27001/2, GRC frameworks and their implementation process.
• Certifications related to CSSP, CISSP, CEH.
• Knowledge of Zero Trust model and their implementation process.
• Strong problem-solving skills.
• In-depth knowledge of computer and network systems.
• Ability to travel up to 2-4 weeks per year.
• Ability to lift up to 50 lbs without assistance.
• Ability to describe technical information in easy-to-understand terms.
• Exemplary interpersonal skills; ability to collaborate effectively with culturally diverse staff across departments and country.
• Interest in social justice strongly desirable.

Benefits

• 401(k) plan with employer match
• Medical insurance
• Dental insurance
• Vision insurance
• Short-term disability insurance
• Long-term disability insurance
• Basic life insurance
• 15 days of vacation
• 12 sick days
• 3 personal days
• 3 volunteer days
• Paid time off during the week between Christmas and New Year's Day
• Paid time off during the week of July 4th
• 11 additional holidays annually