Lead Cyber Security Analyst (Hybrid)

$107,136 - $212,784/Yr

CareFirst of Maryland - Washington, DC

Full-time - Mid Level

Washington, DC

Ambulatory Health Care Services

About the position

The Lead Cyber Security Analyst is responsible for ensuring the organization's data is protected from unauthorized access, disclosure, and damage. This role advocates for and executes cybersecurity processes while supporting business and customer needs. The analyst leads assessments of network and system security, develops procedures for assessing indicators, designs technical solutions for security, and collaborates with the security community to gather cyber threat intelligence.

Responsibilities

• Lead regular assessments of network and system security for intrusion detection, vulnerability, and security configurations.
• Develop procedures for assessing indicators using research of cybersecurity policies, indicators, and protocols.
• Design technical solutions for network protection, endpoint security, access control, auditing, and log management.
• Prevent network damage and restore computers and electronic communication systems.
• Collaborate with the security community to obtain technical cyber threat intelligence.
• Research emerging information security threats, vulnerabilities, and their countermeasures.
• Lead the implementation of strategies for the detection and reporting of day-to-day security incidents.
• Participate in the development of quality assurance policies.

Requirements

• Bachelor's Degree in Computer Science, Cyber Security, Information Technology, or related field, or 4 additional years of relevant work experience in lieu of a degree.
• 8 years of related experience or cybersecurity certification and 5 years of related experience.

Nice-to-haves

• Advanced degree in IT or cybersecurity or equivalent experience.
• Knowledge and work experience using frameworks/regulations such as NIST, HIPAA, HITRUST, and others.
• Experience with a wide variety of security tools such as IPS/IDS systems, firewalls, SIEM, and vulnerability scanners.
• Familiarity with SIG, SOC2 Type 2, and other security attestation documents.
• Experience with GRC or ITRM systems.

Benefits

• Comprehensive benefits package
• Various incentive programs/plans
• 401k contribution programs/plans