Sr. Analyst, Information Security

United States Renal Care Incorporated - Plano, TX

Full-time - Mid Level

Plano, TX

Ambulatory Health Care Services

About the position

As a Senior Analyst in Information Security at U.S. Renal Care, you will play a crucial role in safeguarding the organization against cyber threats and ensuring the integrity of our information systems. This position is integral to our mission of providing high-quality care to patients living with kidney disease. You will be part of a dedicated Information Security team, responsible for protecting the company from intrusions, malware, threat actors, and other forms of cyber attacks. Your work will involve supporting efforts to automate, integrate, and aggregate the data and systems necessary for optimizing and accelerating analysis. In this role, you will research emerging threats and vulnerabilities to aid in the identification of network incidents. You will also support the creation of new architecture, policies, standards, and guidance to address these threats. Your responsibilities will include providing incident response support, which involves mitigating actions to contain activity and facilitating forensic analysis when necessary. Additionally, you will support the development of business continuity and disaster recovery plans, conducting tests, publishing results, and making necessary adjustments to address any deficiencies identified during these tests. You will conduct network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems (IDS/IPS), firewalls, and host-based security systems (HBSS). Your role will also require you to review alerts and data from sensors, document formal technical incident reports, and test new computers, software, switch hardware, and routers before implementation to ensure security. Furthermore, you will conduct log-based and endpoint-based threat detection to protect against threats from multiple sources, deploy cloud-centric detection for threats related to cloud environments, and correlate activity across various assets and environments to identify patterns of anomalous activity. Collaboration with threat intelligence and threat-hunting teams will also be a key aspect of your responsibilities.

Responsibilities

• Research emerging threats and vulnerabilities to aid in the identification of network incidents.
• Support the creation of new architecture, policies, standards, and guidance to address identified threats.
• Provide incident response support, including mitigating actions to contain activity and facilitating forensic analysis when necessary.
• Support the creation of business continuity and disaster recovery plans, including conducting disaster recovery tests and publishing test results.
• Conduct network monitoring and intrusion detection analysis using various computer network defense tools.
• Review alerts and data from sensors and document formal technical incident reports.
• Test new computers, software, switch hardware, and routers before implementation to ensure security.
• Conduct log-based and endpoint-based threat detection to protect against threats from multiple sources.
• Deploy cloud-centric detection to identify threats related to cloud environments and services used by the organization.
• Correlate activity across assets and environments to identify patterns of anomalous activity.
• Work with threat intelligence and/or threat-hunting teams.

Requirements

• Bachelor's degree preferred; degree in computer science, engineering, information systems or another related discipline strongly preferred.
• Five plus (5+) years of work experience in information security, especially in a network security analyst role.
• Technical expertise in analyzing threat event data, evaluating malicious activity, documenting unusual files and data, and identifying tactics, techniques and procedures used by attackers.
• Familiarity with business needs and commitment to delivering high-quality, prompt and efficient service to the business.
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• An understanding of organizational mission, values, and goals and consistent application of this knowledge.
• Strong problem-solving and troubleshooting skills.
• Self-motivated and possessing a high sense of urgency and personal integrity.

Nice-to-haves

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)

Benefits

• Ongoing development and training programs to support career growth and opportunity.
• A culture of diversity and inclusion where each employee has a voice and is valued for their individual talents.