Information Security Analyst Associate UPMC Ireland

UPMC; Ireland; On-site; EUR 45,000 - 65,000; Full time

Job summary

A leading healthcare provider in Ireland seeks an Information Security Analyst Associate to support secure systems development. The role involves managing vulnerabilities, developing security policies, and ensuring compliance. Candidates should have a 4-year degree and relevant experience, with knowledge of both Windows and Linux environments. This position supports work-life balance and career development opportunities.

Benefits

Competitive pay

Fully paid maternity and paternity leave

Flexible working opportunities

Enhanced annual leave up to 27 days

Qualifications

• 1+ years of experience in information security or equivalent practical work experience.
• Strong understanding of information technology tools and concepts.
• Ability to prioritize impactful vulnerabilities.

Responsibilities

• Protect the integrity and confidentiality of data through various measures.
• Develop and maintain security incident handling processes.
• Manage vulnerability related tickets to ensure timely remediation.

Skills

Vulnerability management

Windows and Linux systems

Network protocols (TCP, UDP, HTTP, IP)

Scripting (Python, PowerShell, BASH)

Experience with vulnerability scanners (Tenable, Rapid7)

Familiarity with cloud environments (AWS, Azure)

Endpoint protection tools (Crowdstrike, Sophos)

Education

4-year academic degree

CompTIA Network+ certification

CompTIA Security+ certification

Tools

Vulnerability scanners (Tenable, Rapid7, Qualys)

Web application scanners (Burp, AppScan)

Logging/analytic tools (Splunk)

Job description

Overview

Information Security Analyst Associate UPMC Ireland

Location: MacDonagh Office
Job type: Permanent

Under the general direction of the management team and senior staff, the Information Security Analyst - Intermediate supports the Information Security Group's efforts to develop secure systems and networks through the identification and implementation of automated tools, development and execution of security processes, procedures, advanced security techniques, and reporting

Responsibilities

• Provide service to IT client community, patients, families and visitors, while protecting the integrity and confidentiality of all data and information through physical and electronic measures.
• During professional activities, conducts themselves in accordance with the highest standards of moral, ethical and legal behaviour.
• Assist Application and System Support representatives in the development and accreditation of Security Plans to ensure policy and best practice compliance of controls in place.
• Resolve security issues in complex multi-disciplined environments.
• Examine systems and applications to assess the current security posture.
• Develop and maintain security incident handling processes.
• Develop and implement security policy enforcement technologies.
• Review and revise security policies as identified through technology and risk analysis reviews.
• Manage vulnerability related tickets to ensure issues are remediated within proper timelines.
• Fulfil departmental requirements in terms of providing work coverage and administrative notification during periods of personal illness, vacation, or education.
• On-call support may be required at designated times.
• Ability to establish priorities and delegate tasks to the appropriate personnel or work independently as necessary.

Experience / Qualifications

• Demonstrates and applies a thorough understanding of information technology tools, best practices, and concepts.
• Ability to prioritize impactful vulnerabilities and reduce noise often associated with vulnerability tools.
• Experience working with Windows, Linux and/or other Unix-like variants.
• Understanding of TCP, UDP, HTTP, IP and other network protocols.
• Understanding of how to triage vulnerabilities and validate tool findings before reporting them or taking action.
• Experience with vulnerability scanners (e.g. Tenable, Rapid7, Qualys, OpenVAS, etc.).
• Experience with web application scanners (e.g. WebInspect, AppScan, Accunetix, Burp, etc.).
• Ability to automate and script tasks (e.g. Python, PowerShell, BASH).
• Ability to utilize and write scripts against common web APIs (REST, SOAP).
• Experience working in a cloud environment (AWS or Azure).
• Experience working with end point protection tools (Crowdstrike, Sophos)
• Experience working with logging / analytic tools (Splunk)

The above Job Description is not intended to be a comprehensive list of all duties involved and consequently, the post holder may be required to perform other duties as appropriate to the post which may be assigned to him/her from time to time and to contribute to the development of the post while in office.

Qualifications / Education / Experience

• Typically has a 4-year academic degree and 1+ years of information security or equivalent practical work experience.
• Demonstrates and applies thorough understanding of information technology tools, best practices, and concepts.
• Completes on-going training on-the-job, through courses, self-study, certifications and/or advanced degrees to maintain and enhance technical and business capabilities.
• Maintains current knowledge of security techniques and
• Licensure/Certification:
• CompTIA Network+ and Security+ certifications are preferred

Equal Opportunity Statement and Benefits

UPMC is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

At UPMC we provide a total rewards program that is not only market competitive, but fair and provides growth opportunities for all our colleagues.

Compensation & Benefits Highlights

Compensation - Competitive pay for the work employees do - base pay, performance related pay and premium pay where applicable.

Benefits - Fully paid maternity and paternity leave for new parents. Competitive Pension Plan, company funded Death in Service Benefit x 3 times. Critical Illness cover for all employees up to the age of 66.

Performance and Work-Life

Performance and Recognition - Rewards for performance that supports the goals and mission of UPMC through our annual ACES programme.

Work-Life Balance - Enhanced annual leave up to a maximum of 27 days. Flexible working opportunities to support you to work around external family commitments.

Development and Career Opportunities

Opportunities for each employee to reach their career goals through continued learning and/or advancement.

About UPMC

UPMC is a renowned multinational academic medical centre committed to delivering people-focused care that\'s close to home. Headquartered in Pittsburgh and affiliated with the University of Pittsburgh Schools of the Health Sciences, UPMC shapes the future of health through clinical and technological innovation, research and education. UPMC expands its expertise globally, bringing world-class care across continents through its UPMC International division - an owned and operated network of hospitals and ambulatory care centres in Italy, Ireland and Croatia. UPMC International brings new access to the signature specialty services of UPMC Hillman Cancer Centre, UPMC Sports Medicine and others to more people in more places around the world.

In Ireland UPMC has provided high-quality healthcare in the South East since 2006. UPMC\'s operations in Ireland now include UPMC Whitfield Hospital in Waterford, UPMC Sports Surgery Clinic in Dublin, UPMC Kildare Hospital in Clane, and UPMC Aut Even Hospital in Kilkenny. Outpatient care is available at the UPMC Carlow Outreach Centre, UPMC Hillman Cancer Centre radiotherapy locations in Waterford and Cork, UPMC The 4th Practice in Mallow, and across UPMC Sports Medicine Clinics in Dublin, Waterford, Limerick, Tipperary, Cork, and Mayo. UPMC has also established a nationwide Concussion Network. UPMC\'s Global Technology Operation Centre is based in Kilkenny.