Senior Cybersecurity Analyst

The Cybersecurity Analyst Senior plays a key role as a member of the Cybersecurity team within the Cook Children's Health Care System (CCHCS) Information Security Office. Cybersecurity supports the CCHCS mission through the use of information security tools and technologies that detect, prevent and/or mitigate threats to the confidentiality, integrity and/or availability of information resources. Disciplines for this job description include: administer, support, and maintain cybersecurity technology systems (IDPS, proxy, DLP, etc.); threat mitigation; malicious code detection, response, and prevention; operating systems security oversight; local and wide area network security; compliance enforcement; researches emerging threats and vulnerabilities to aid in the identification of network incidents; vulnerability and medical device ioT scanning and reporting; provides incident response support including mitigating actions to contain activity and facilitating forensics analysis when necessary; data leak protection review and reporting; user behavior analytics system management; conducts network monitoring and intrusion detection analysis; conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources; correlates activity across assets (endpoint, network, apps) and environments to identify patterns of anomalous activity; reviews alerts and data from sensors and documents formal, technical incident reports; works with threat intelligence and/or threat-hunting resources; and participates in the production of documentation and management reporting. Other disciplines include ability to communicate technical concepts to a non-technical audience, project multi-tasking; mentoring junior staff; and leading security team in the performance of their assigned disciplines.

Qualifications:

• Position requires a Bachelor's degree in the field of computer science or other related field.
• 8 years of professional experience working within an information security program requiring compliance with regulations such as HIPAA, PCI/DSS or equivalent.
• Extensive critical thinking and troubleshooting skills.
• Excellent technical writing skills and ability to communicate effectively at all levels of the organization.
• Experience identifying, measuring and mitigating network security risks.

Licensure, Registration, and/or Certification:

• At least one relevant IT Security certification is required (CISSP, CISA, Security+, CEH, GSEC, etc.).