Information Security Analyst

PacificSource Health Plans - Boise, ID

Full-time - Entry Level

Boise, ID

Insurance Carriers and Related Activities

About the position

The Information Security Analyst I at PacificSource Health Plans is responsible for supporting the organization's efforts to protect its information systems and data from unauthorized access, misuse, and threats. This role involves monitoring and responding to security incidents, conducting vulnerability assessments, coordinating security awareness programs, and supporting audits and assessments. The Analyst plays a critical role in maintaining the security posture of PacificSource and ensuring compliance with relevant security policies and regulations.

Responsibilities

• Ensure security operations adequately meet the business needs and evolving threat environment.
• Identify, investigate, and respond to security incidents, coordinating appropriate resources and communicating appropriately with stakeholders.
• Create, maintain, and train stakeholders on security incident response.
• Mature the Information Security Program through contributions around improving security operations, security controls, response plans, and security awareness.
• Audit security controls and validate efficacy of existing controls.
• Remain up to date with current attack methods and characteristics to identify threats and advise on prevention, mitigation, and remediation.
• Assist in designing, implementing, and maintaining technical security programs including threat and vulnerability management, security event monitoring and response programs.
• Contribute to the continuous improvement of the security culture and posture of PacificSource.
• Actively collaborate with other departments acting in a consultative capacity promoting a strong security culture.
• Remain current on industry best practices, the threat environment, and understanding how emerging threats may potentially impact the organization.

Requirements

• Minimum of 6 months of experience in information security or related IT field required.
• Associate's degree in Computer Science, Information Security, or related field (or equivalent experience) required.
• Relevant IT security certifications or accreditations (e.g. CompTIA Security+, Network+, Cisco Certified Network Associate (CCNA), GIAC Information Security Fundamentals (GISF), GIAC Security Essentials (GSEC), ISC2 Associate) are preferred.
• Experience in security operations, insider threat programs, incident response, vulnerability and patch management, Data Loss Prevention (DLP) systems, Endpoint Detection and Response, Security Information and Event Management (SIEM) technologies, and Indicators of Compromise (IoC).
• Knowledge of system administration on Windows, UNIX or Linux is preferred.
• Familiar with network architecture and technologies.
• Information security experience with HIPAA, HITECH, HITRUST, and PCI are a plus.

Nice-to-haves

• Knowledge of Advanced Persistent Threats (ATP) and the current threat landscape.
• Experience with Phishing Awareness Programs.