Cyber Security Analyst I

GBMC HealthCare; Baltimore (MD); On-site; USD 68,000 - 116,000; Full time

Job summary

GBMC HealthCare in Baltimore, MD is seeking a Cyber Security Analyst I / Systems Administrator to manage access controls, user permissions and auditing across GBMC systems, with emphasis on protecting email systems, credentials and electronic protected data. The role includes documentation, threat mitigation and security education.

Responsibilities cover incident response, digital forensics, policy administration and knowledge of cyber threats.

Qualifications

• Bachelor's degree or current intermediate level IT security, cybersecurity or EMR certifications.
• Associate degree plus 2 years of relevant experience may be considered for individuals with in-depth experience clearly related to the position.

Responsibilities

• Manage access control, passwords, and account creation and auditing.
• Respond to security incidents and analyze threats.
• Collect and analyze digital evidence for investigations.
• Assist in policy creation and maintenance for IT and cybersecurity.
• Deliver cybersecurity education and awareness briefings.
• Monitor external threat intel and perform threat triage with SIEM/SOAR.
• Implement security best practices for Microsoft 365 and EMRs.

Skills

SIEM analysis

Endpoint security

AD/Exchange 365

Email security

MFA administration

Cybersecurity policies

EMR security

Access management

RBAC database

Communication skills

Education

Bachelor's degree in CS or related field

EMR cybersecurity certifications considered

Tools

SOAR

SIEM

Microsoft 365

Job description

• Multifactor Authentication administration

Under limited supervision, the Cyber Security Analyst I / Systems Administrator is primarily responsible for the access management, auditing and deployment of user-based permissions to GBMC systems, electronic data and ensuring the overall safety of Information System assets. These responsibilities include: the implementation, monitoring and auditing of security measures for the protection of email systems, user credentials, and electronic protected data; the documentation of all relevant standard operating procedures and policies; deploying threat mitigation measures; the triage and analysis of identified vulnerabilities or security events; security education and training; maintains current knowledge of relevant technology and industry best practice; participates in special projects and other duties as assigned.

Education

Bachelor's degree or current intermediate level IT security, cybersecurity or EMR certifications. Associate degree plus 2 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position. Degree must be in Computer Science or a related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Healthcare IT, Information Assurance, Information Security, and Information Systems)

Experience

At least one year of experience required if possess Bachelor’s degree or current intermediate level IT security, cybersecurity or EMR certifications; or at least two years of experience required if possess Associate's degree. Relevant experience must be in computer or information systems design/development, programming, information/cyber/network security, vulnerability analysis, penetration testing, computer forensics, information assurance, and/or systems engineering

Skills

• SIEM analysis
• Next Gen Endpoint detection management and analysis
• Proficiency with Active Directory and Microsoft Exchange 365
• Knowledge of Electronic mail security and protection
• Multifactor Authentication administration
• Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• EMR access and security management
• Systems Access Management
• Role based database management
• Effective written and verbal communication

Licensures, Certifications

• Preference for certifications for EMR security, network security, cybersecurity or digital forensics from EC-Council, CompTIA, SANS
• Industry cyber tool certifications considered if relevant to GBMC

Patient & Workplace Safety

• Employee has knowledge and understanding of patient and workforce safety as it relates to job duties.

Patient Population

• Demonstrates competency in the delivery of care and applies the knowledge to meet age-specific needs if applicable.

Principal Duties And Responsibilities

Systems Access

• Responsible for access control, passwords, and account creation and administration and auditing

Incident Response

• Responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities

Digital Forensics

• Collects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations

Policy Administration

• Assist in the creation, auditing and maintenance of policies and procedures in relation to IT and cybersecurity

Cybersecurity Education

• Ability to prepare and deliver education and awareness briefings to ensure that systems, network, and data users are aware of and adhere to systems security policies and procedures

Knowledge of Cyber Threats/Global Trends

• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise
• Cyber threat analysis and triage using SOAR, SIEM and behavior analysis technologies
• Threat response and remediation using NGEP
• Implementing security best practices and controls for Microsoft 365 and production EMRs
• Red team/Blue team exercises for overall system and team analysis

All Roles Must Demonstrate GBMC Values

I will treat everyone with courtesy. I will foster a healing environment.

• Treats others with fairness, kindness, and respect for personal dignity and privacy
• Listens and responds appropriately to others’ needs, feelings, and capabilities

I will strive for superior performance in every aspect of my work. I will recognize and celebrate the accomplishments of others.

• Meets and/or exceeds customer expectations
• Actively pursues learning and self-development
• Pays attention to detail; follows through

I will be professional in the way I act, look and speak. I will take ownership to solve problems.

• Sets a positive, professional example for others
• Takes ownership of problems and does what is needed to solve them
• Appropriately plans and utilizes required resources for various job duties
• Reports to work regularly and on time

I will be engaged and collaborative. I will keep people informed.

• Works cooperatively and collaboratively with others for the success of the team
• Addresses and resolves conflict in a positive way
• Seeks out the ideas of others to reach the best solutions
• Acknowledges and celebrates the contribution of others

I will always act with honesty and integrity. I will protect the patient.

• Demonstrates honesty, integrity and good judgment
• Respects the cultural, psychosocial, and spiritual needs of patients/families/coworkers

I will set goals and measure outcomes that support organizational goals. I will give and accept help to achieve goals.

• Embraces change and improvement in the work environment
• Continuously seeks to improve the quality of products/services
• Displays flexibility in dealing with new situations or obstacles
• Achieves results on time by focusing on priorities and manages time efficiently

Pay Range

$68,150.51 - $115,855.86

Final salary offer will be based on the candidate's qualifications, education, experience and alignment with our organizational needs.

Equal Employment Opportunity

GBMC HealthCare and its affiliates are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, mental or physical disability, genetic information, veteran status, or any other status protected by federal, state, or local law.