Note: The job is a remote job and is open to candidates in USA. Medical University of South Carolina is seeking a highly skilled and experienced Senior Information Security Analyst to join their team. This role is critical in safeguarding their complex healthcare IT environment and ensuring compliance with industry standards.
Responsibilities
- Serve as a lead escalation point for security incidents, overseeing detection, investigation, containment, and remediation within a CrowdStrike EDR environment across a healthcare infrastructure. Experience with Microsoft Defender for Endpoint EDR is also desired
- Analyze findings from security monitoring systems, including Intrusion Detection/Prevention Systems (ID/PS) and Security Information Event Management (SIEM) consoles, to identify and respond to potential security incidents and data breaches
- Perform cyber security incident handling, tracking and reporting
- Utilize professional judgment and institutional knowledge to assess risk levels, conduct forensic investigations, isolate malware, identify attack vectors, provide guidance on remediation planning, and prioritize remediation efforts
- Respond to relevant service requests received from end users (e.g. for investigation of security events)
- Collaborate with internal Security Operations Center (SOC) teams and external Managed Security Service Providers (MSSPs) to contain and remediate security incidents
- Configure, manage, and optimize SIEM platforms (Crowdstrike and/or Microsoft Sentinel) to enhance threat detection and response capabilities
- Lead and manage large scale security-related projects, including tool implementations, upgrades, and process improvements
- Conduct vulnerability assessments to identify security risks and report findings to system owners
- Manage workflows to ensure that protected assets are properly assessed in a timely manner
- Continuously evaluate and update analytics to counter evolving Threat Actor tactics, techniques, and procedures (TTPs)
- Perform risk assessments and translate business requirements into effective security controls
- Maintain comprehensive documentation and present findings to stakeholders in a clear and actionable manner
- Create and deliver security awareness training for technical and non-technical audiences
Skills
- A Bachelor's degree in information security, information assurance, computer science, or a related field with 5 years of IT security experience; or 10 years of hands-on experience in information security or related IT experience required, at least 6 of which must be directly related IT security experience; or a Master's degree in information security, information assurance, computer science, or a related field, and 3 years of IT security experience required
- Advanced knowledge of information security principles, risk management, and regulatory compliance (HIPAA, FERPA, NIST, etc.)
- Strong analytical and problem-solving skills with the ability to make decisions under pressure
- Hands-on experience with Crowdstrike EDR, SIEM, IDS/IPS, vulnerability management, and threat intelligence tools
- Familiarity with cloud security (Azure, AWS) and identity management solutions
- Advanced Understanding on the administration and securing of various operating systems and enterprise applications with advanced security best practices
- Excellent written and verbal communication skills, with the ability to translate technical findings into business-relevant language
- Mentor junior analysts and contribute to the development of security standards, procedures, and playbooks
- CISSP, CISM, GIAC, or equivalent
Company Overview