Cybersecurity Analyst

Cybersecurity Jobs; Nashville (TN); On-site; USD 75,000 - 110,000; Full time

Benefits offered by this job

Health benefits

Disability benefits

Retirement plan

Wellness programs

Job summary

Vanderbilt Health seeks a Cybersecurity Analyst to support onsite security operations in Nashville, TN. You will investigate incidents, assess vulnerabilities, and analyze threats, often with guidance on complex forensic tasks.

The role covers computer forensics, electronic discovery, and threat analysis while contributing to smaller technology projects. Key responsibilities include investigations, breach response, vulnerability analysis, and resolving complex security issues.

Qualifications

• Bachelor's degree required.
• 2+ years of experience required.
• Ability to solve medium to complex problems.
• Demonstrates Anomaly Detection in practical applications.

Responsibilities

• Conduct computer investigations.
• Respond to and mitigate security breaches and attacks.
• Perform vulnerability and threat analysis for the environment.
• Troubleshoot and resolve complex security issues.
• Conduct computer forensic investigations, data recovery, and electronic discovery.
• Conduct small and medium scale vulnerability assessments and threat analysis.

Skills

Intrusion Detection Systems

Dynamic Analysis

Static Analysis

PPTP/VPN breaking

Malware Analysis

Education

Bachelor's degree

Tools

Malware Analysis tools

Intrusion Detection Systems software

Job description

Vanderbilt Health is seeking a Cybersecurity Analyst to support onsite security operations in Nashville, TN. In this role, you will help safeguard infrastructure by investigating incidents, assessing vulnerabilities, and analyzing threats, often working with occasional guidance when conducting more complex forensic and discovery activities.

The position focuses on practical security work across computer forensics, electronic discovery, and threat analysis, along with troubleshooting and resolution of complex security issues. You will also contribute to small and medium technology projects or components of larger initiatives.

Key Responsibilities

• Conduct computer investigations.
• Respond to and/or mitigate security breaches and attacks to the infrastructure.
• Perform vulnerability and threat analysis for the environment.
• Troubleshoot and resolve complex security issues.
• Conduct computer forensic investigations, data recovery, and electronic discovery under occasional guidance.
• Conduct small and medium scale vulnerability assessments and threat analysis for the environment.
• Implement small and medium technology projects or components of large projects.

Required Qualifications

• Minimum 2 years of experience.
• Bachelor's degree.
• Ability to solve medium to complex problems.
• Ability to demonstrate Anomaly Detection practices in practical applications of moderate difficulty.
• Capable of using Intrusion Detection Systems software.
• Ability to demonstrate Network Forensics in practical applications of moderate difficulty.
• Demonstrates the ability to respond quickly to reports from individuals.
• Takes immediate action to stop an incident from continuing or recurring.
• Determines whether an incident should be handled locally or reported to the IT Security Response Team.
• Works with IT support staff to repair a system, restore service, and preserve evidence of the incident.
• Handles sensitive and other critical responses in a professional manner.
• Evaluates and documents investigation findings after resolving an incident.
• Possesses sufficient fundamental proficiency to successfully demonstrate Malware Analysis in practical applications of moderate difficulty.
• Has determined the behavior and purpose of a simple malware threat and eliminated it from the company’s computers.
• Familiar with Dynamic Analysis and Static Analysis.
• Has used basic Malware Analysis tools and products.
• Demonstrates the ability to review basic Internet connections and internal networks to identify standard hacker/cracker threats.
• Able to review the configuration of server and major network applications to identify configuration errors and other issues that weaken organizational systems and increase misuse likelihood.
• Has conducted an assessment of at least one of the following: access controls; password controls; connectivity controls (e.g., open ports/enabled protocols); inappropriate files (including viruses, worms, Trojan horses, bootleg software, music files, inappropriate image files); unpatched software, bringing attention to available security-related patches that have not been deployed.
• Basic knowledge of several of the following: network foot-printing, port scanning, and enumeration techniques, specific operating system vulnerabilities [like Win-NT, *nix, Win-2K, Solaris], web server vulnerabilities, application level exploits, worms, viruses, and Trojans, network vulnerabilities, sniffing, wireless sniffing, IP spoofing, and PPTP/VPN breaking.
• Generate security reports for management that show system safety and incident reporting.

Technical Skills and Tools

• Intrusion Detection Systems
• Dynamic Analysis
• Static Analysis
• PPTP/VPN breaking

Vulnerability Assessments

• Demonstrates the ability to review basic Internet connections and internal networks to identify standard hacker/cracker threats.
• Able to review server and major network application configurations to identify errors and weaknesses.
• Generate security reports for management covering system safety and incident reporting.

Work Context

This role executes responsibilities with an understanding of how work impacts other areas within the own job area or team, with occasional guidance. You will also provide informal guidance and support to team members and contribute to continuous improvement through learning and applying experience to uncover underlying causes and improve outcomes.

Benefits

• A comprehensive benefits package, which may include health, disability, retirement, and wellness offerings.