Job details
Job type full-time
Full job description
Position overview:
This is a work from home opportunity and the person hired for this role can live anywhere in california, or in any other sutter approved stateMust come on site if requested for meetings, etc.
This position is responsible for providing data security support and guidance to sutter health operating units and affiliates for multi-faceted protectionWill represent the department on project teams and other privacy investigation (pi) and information security (is) initiativesThe position will be primarily responsible for monitoring data from the security solutions, and provides hands-on security administration of a broad range of security duties and requires a high level of technical experienceDuties and responsibilities include, but are not limited to, oversight of design, engineering, analysis, research, testing and monitoringThe position will also serve as the most senior advisor to the privacy and information security leadership as a subject matter expert on end point security, vulnerability management, siem and/or network securityThis is a technical position on the information security team, and is the most seasoned team member in terms of scope and expertise, and is considered the 3rd level of analyst on the team.
The vulnerability management & threat intelligence (vmti) group is responsible for the program of vulnerability management, threat intelligence, penetration testing, and red/blue teaming services to support the cyber security operations center (csoc)Positions in this group represent the privacy and information security department under the office of general counsel, and will work with their leadership, technical operations and other groups to proactively identify, quantify, and report vulnerabilities and threats throughout the organization.
Below are the specific concentrations and responsibilities for positions in the vmti group:
Vulnerability management:
Performing and reporting vulnerability scanning operations
Working with key stakeholders to remediate vulnerabilities
Carrying out threat hunting campaigns and missions
Supporting penetration testing services with internal and external stakeholders
Coordinating and executing of purple teaming exercises with ir team resources
Facilitating of cyber threat simulation exercise
Threat intelligence:
Conducting cyber threat intelligence researches and assessments
Tracking threat actors and campaigns
Maturing the intelligence development process, procedures, and techniques
Engaging internal and external entities to gather cyber threat intelligence
Supporting in penetration testing services with internal and external stakeholders
Facilitating cyber threat simulation exercises
Penetration testing:
Coordinating penetration testing services with internal and external stakeholders
Delivering pen-test engagements via out hands-on keyboard
Coordinating and executing purple teaming exercises with ir team resources
Coordinating and executing red team projects
Supporting vulnerability scanning operations
Facilitating cyber threat simulation exercises
Penetration testing specific experience: performing red team assessments (physical, social engineering, and network exploitation); conducting penetration testing on applications, network, web, databases; performing controlled vulnerability exploitation; conducting network reconnaissance, osint, and physical security reviews; evaluating technology risks; familiar with owasp top 10;
Qualifications:
Education
Bachelor`s degree in business, cyber security, risk management, information technology, computer science or related field required or equivalent education/experience.
Licensures and certifications certified information systems security professional - cissp preferred.
Experience
Previous experience as an it security analyst or related field as typically acquired with 6-9 years in a similar position is required
Healthcare information technology industry experience preferred
Skills & knowledge
Previous experience providing cyber security support by planning, coordinating, integrating and synchronizing cyber defense and prevention activities
Proven experience ensuring compliance with all applicable state and federal cyber laws and regulations
Significant experience creating comprehensive and accurate reports that are used to communicate sutter health’s risk profile impact to peers and management
Thorough knowledge of information systems security concepts and current information security trends and practices including security processes and methods
General knowledge of federal and state is security and privacy-related regulatory requirements and laws
In depth knowledge regarding nist, hipaa, fips, and other recognized industry security standards and best practices
Detailed understanding of end point security technologies (antivirus, forensics, anti-malware, hips)
Detailed understanding of end point operating systems (windows and linux)
In depth knowledge of cyber security solutions, policies and technologies
Understanding of the lifecycle of a network threat and network vulnerability exploitation in a healthcare environment
Working understanding of the anatomy of a cyber attack
Advanced level of skill using microsoft windows workstation and server, unix/linux and network os’s
Proven ability to use internet technologies including dns, routing, smtp, http, dhcp, and ftp etc.
Strong technical skills in planning, administration, and management of information systems, operational and technical security controls, and security risk analysis and management
Excellent written/verbal interpersonal communication skills with the ability to interact effectively with a broad and diverse group of peers, users, and executives
Proven ability to prioritize work while multi-tasking on assigned work.
Demonstrated ability to acquire images, either remote or local, to a workstation or server
Proven ability to conduct forensics activities in the context of an active attack
Strong technical skills in end point security controls, such as acls, hips, registry, logging, and forensics.
Strong ability to perform and conduct incident response and participate in security incident and post incident response process
Proven ability to break down highly complex technical topics into language and diagrams understandable to a wide audience
Organization: sutter health system office
Employee status: regular
Benefits: yes
Position status: exempt
Union: no
Job shift: day
Shift hours: 8 hour shift
Days of the week scheduled: monday-friday
Weekend requirements: other
Schedule: full time
Hrs per 2wk pay period: 80
Applications accepted: all applications accepted
