Consulting Security Analytics Architect

HCA Healthcare; Nashville (TN); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Wellbeing support

PTO & family leave

Job summary

HCA Healthcare is seeking a Consulting Security Analytics Architect to develop advanced security analytics and optimize detection across our Cybersecurity, Insider Threat, and Fraud programs. You will lead detection engineering, mentor engineers, and collaborate with Threat Intelligence to drive threat-informed defense.

The ideal candidate has 7+ years in security data analytics, is proficient with Python, SPL, KQL, and BigQuery/SQL, and understands Cloud, Network, Endpoint, and Orchestration

Qualifications

• Bachelor's degree preferred.
• Seven or more years in a security data analytics or data science role.

Responsibilities

• Develop advanced security analytics for detection and mitigation of threats.
• Enhance SIEM and analytics platforms through signature-based and behavior-based detections.
• Mentor engineers and drive threat detection engineering efforts.
• Collaborate with Threat Intelligence and participate in threat modeling and purple teaming.
• Maintain CI/CD pipelines for rapid deployment of detections.
• Conduct threat hunting as part of the research and development process.

Skills

Python

Splunk SPL

KQL (Kusto)

BigQuery/SQL

Threat detection

Threat hunting

CI/CD

Threat Intelligence

Education

Bachelor's degree

Tools

MITRE ATT&CK

Splunk

Kusto

Job description

Last year our HCA Healthcare colleagues invested over 156,000 hours volunteering in our communities. As a(an) Consulting Security Analytics Architect with HCA Healthcare you can be a part of an organization that is devoted to giving back!

Job Summary And Qualifications

As a Consulting Security Analytics Architect, you will serve as a subject matter expert (SME) in developing advanced security analytics to help detect and mitigate emerging cyber threats. You will play a key role in maximizing the effectiveness of the SIEM and security data analytics platforms, while also providing thought leadership and mentoring to a team of engineers responsible for developing signature-based and behavior-based threat detections.

The ideal candidate will have extensive experience developing security analytics for Cybersecurity, Insider Threat or Fraud use cases and be familiar with advanced detection engineering concepts such as Risk-Based Alerting (RBA) and Detection-as-Code (DaC). The candidate should possess familiarity with one or more of the following areas: Cloud (IaaS/PaaS), Network, Endpoint, Container and Orchestration, and IoT. The candidate should also be able to communicate threat detection concepts effectively with external teams and stakeholders.

• Researches emerging threat TTPs and IOAs using threat intelligence and the MITRE ATT&CK framework, and designs scalable detection solutions to ensure the organization remains protected against new and evolving threats.
• Demonstrates proficiency in multiple scripting and query languages, including Python, Splunk query language (SPL), Kusto query language (KQL) and GCP BigQuery / SQL.
• Applies machine learning (ML) models and statistical methods to enhance detection capabilities.
• Identifies data enrichment opportunities to add valuable contextual information to detections.
• Identifies tuning opportunities to reduce false positives while increasing detection efficacy.
• Enhances and maintains CI/CD pipelines to ensure efficient, high-quality and rapid deployment of detection content.
• Conducts threat hunting activities as part of the detection research and development process.
• Collaborates with the Threat Intelligence team to assess cyber threat intelligence and drive threat informed defense.
• Participates in purple teaming and threat modeling exercises to identify new high value detections as well as gaps with existing detections.
• Performs other duties as assigned
• Practices and adheres to the “Code of Conduct” philosophy and “Mission and Value Statement.”

What qualifications you will need

• Bachelors Degree preferred
• Seven or more years in a security data analytics or data science role

Knowledge, Skills, Abilities, Behaviors

• Service and Quality Excellence: Ability to demonstrate an uncompromising commitment to delivering exceptional care to create an unmatched value proposition for our patients. Required
• Honor our Mission and Values: Ability to build trust and act with authenticity to cultivate a culture of integrity, inclusion, and mutual respect. Required
• Effective Decision Making: Ability to make timely, informed decisions that are in the best interest of our patients, employees, providers, community and HCA. Required
• Attain and Leverage Strategic Relationships: Ability to develop and strengthen collaborative relationships with both internal and external stakeholders to advance the care of our patients and the growth of HCA. Required
• Lead and Develop Others: Ability to lead others to accomplish organizational goals and objectives; provide meaningful coaching and mentoring to increase the capabilities of individuals and teams and drive employee engagement. Required
• Communicate with Impact: Ability to deliver information in a clear, concise, and compelling manner to effectively engage others and achieve desired results. Required
• Achieve Success through Change: Ability to identify opportunities for improvement and innovation, remove barriers and resistance, and enable desired behaviors. Required
• Drive Execution and Financial Results: Ability to commit to the success and financial wellbeing of HCA by challenging others to excel and hold themselves and others accountable for achieving results. Required

Benefits

HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:

• Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services
• Wellbeing support, including free counseling and referral services
• Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence
• Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling
• Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing
• Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts

HCA Healthcare has been recognized as one of the World's Most Ethical Companies® by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.

"There is so much good to do in the world and so many different ways to do it."- Dr. Thomas Frist, Sr.

HCA Healthcare Co-Founder

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Note: Eligibility for benefits may vary by location.