Job details
Job type full-time
Full job description
Position overview:
This role has a work from home opportunity, the candidate must be local to the sacramento area and be available to come on site for work, meetings, etcAs requested.
The investigations and forensics team is responsible for the case management, evidence collection, chain of custody, objective analysis, and reporting of physical media and digital dataInvestigations and forensics will reduce the impact to our patients, members, employees, and services through repeatable, defensible, creative, compliant and legal ways using technical processes to validate policy and legal violations in support of legal and human resources requirements.
The senior analyst, cyber security - forensics is experienced in the career field of forensic investigationsThis role will assist with the development, implementation and training of our primary forensic investigation platform along with all open source and other commercial forensic tools necessary to maintain, develop and grow the forensic programYou will assist with the administration of forensic tools, design of enterprise forensic solutions, collection and analysis of digital data, managing technical relationships, case management monitoring, process improvementDuties and responsibilities include, but are not limited to, correlation, analysis, research, testing, documentation, development and monitoringThis is a technical position on the privacy and information security team.
Our ideal candidate will be a strong communicator with superior interpersonal and technical skillsYou will work with all levels of staff and leadership and therefore must be able to interact effectively with broad and diverse groupsYou should be well organized and be able to prioritize assigned work and convey complex technical topics into language and diagrams understandable to a wide audience.
This position will have a focus on the forensics case life cycle and is responsible for forensics design, system performance, issue troubleshooting, and case management, including working with other support teams, and business stakeholders to investigate and resolve incidentsThe senior analyst, cyber security - forensics must have comprehensive knowledge of information security methodologies, technologies, and best practiceYou will have proficiency and experience completing standard operating system forensic examinations as well as mobile including collections, analysis and comprehensive reportingThe senior analyst, cyber security - forensics will represent the privacy and information security group under the office of the general council, and will work with leadership, technical operations and other facets of the investigations team.
Essential job functions:
Duties and responsibilities include but are not limited to evaluating case scope and evidence collection capabilities.
Assist with architect, design, evaluate, implement, and roll out forensic solutions covering endpoints, email, web, cloud applications, mobile and other systems.
Provide digital forensic services in support of cyber security incident response efforts.
Perform digital forensics functions including but not limited to host-based analysis through investigating windows, linux, ios, and macos systems to identify indicators of compromise (iocs)
Preserve, collect, and analyze data from electronic data sources and systems including laptop and desktop computers, servers, mobile devices, and cloud services.
Act as technical subject matter expert on information security standards, operations, and technologies by performing ongoing research on industry trends, best practices, and new technologies.
Providing input in creation and revising enterprise forensic standard operating procedures and policies.
Initiating issue remediation steps and escalate issue remediation to leadership.
Coordinating and collaborating with cross functional teams to complete case activities.
Mentor and assist junior team members and contribute to their professional growth and development.
Qualifications:
Education, licensures and certifications
Bachelor`s degree in business, cyber security, risk management, information technology, computer science or related field or the equivalent education/experience required.
Certified information systems security professional - cissp is preferred
Experience
Previous experience as an it security analyst or related field as typically acquired with 3-5 years in a similar position is required
Healthcare information technology industry experience is strongly preferred
3-5 years of previous experience providing cyber security support by planning, coordinating, integrating and synchronizing cyber defense and prevention activities is required
3-5 years of proven experience ensuring compliance with all applicable state and federal cyber laws and regulations is required
3-5 years of significant experience creating comprehensive and accurate reports that are used to communicate sutter health’s risk profile impact to peers and management is required
Skills and knowledge
Thorough knowledge of information systems security concepts and current information security trends and practices including security processes and methods
General knowledge of federal and state is security and privacy-related regulatory requirements and laws
In-depth knowledge regarding nist, hipaa, fips, and other recognized industry security standards and best practices
Detailed understanding of dlp and dlp technologies
Detailed understanding of data movement in a large healthcare system and typical healthcare business processes
In depth knowledge of cyber security solutions, policies and technologies
Understanding of the lifecycle of a network threat and network vulnerability exploitation in a healthcare environment
Working understanding of the anatomy of an attack
Advanced level of skill using microsoft windows workstation and server, unix/linux and network os’s
Proven ability to use internet technologies including dns, routing, smtp, http, dhcp, and ftp etc.
Strong technical skills in planning, administration, and management of information systems, operational and technical security controls, and security risk analysis and management
Excellent written/verbal interpersonal communication skills with the ability to interact effectively with a broad and diverse group of peers, users, and executives
Proven ability to prioritize work while multi-tasking on assigned work.
Demonstrated ability to acquire images, either remote or local, to a workstation or server
Proven ability to conduct forensics activities in the context of an active attack
Strong ability to perform and conduct incident response and participate in security incident and post incident response process
Proven ability to break down highly complex technical topics into language and diagrams understandable to a wide audience
Organization: sutter health system office
Employee status: regular
Benefits: yes
Position status: exempt
Union: no
Job shift: day
Shift hours: 8 hour shift
Days of the week scheduled: monday-friday
Weekend requirements: other
Schedule: full time
Hrs per 2wk pay period: 80
Applications accepted: internal
