Engineer III - Security Analyst

Inland Empire Health Plans; Rancho Cucamonga (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Fitness center on-site

Medical Insurance with Dental and Vis迷

Job summary

Inland Empire Health Plans (IEHP) seeks an Engineer III – Security Analyst to advance its defensive posture across on-premises and cloud environments. You will maintain security policies, conduct incident analysis, and mentor teammates while guiding deployment of critical initiatives with threat intelligence.

The role emphasizes Blue Team activities, MITRE ATT&CK alignment, and security operations across Windows, Linux, and macOS platforms, with a strong focus on HIPAA/NIST compliance.

Qualifications

• Eight or more years in IT with at least five in cybersecurity focusing on protect/detect/respond.
• Familiar with MITRE ATT&CK, Cyber Kill Chain; blue team exercises.
• Experience with Windows, MacOS and Linux operating systems.
• Knowledge of SDLC and security tooling (SIEM, DLP, EPM, firewalls, WAFs).
• Proficient in PowerShell, JavaScript or Python scripting; IAM tools experience.
• Security standards such as HIPAA, NIST 800-53, NIST CSF, Zero Trust.

Responsibilities

• Advance the organization’s defensive posture across on-prem and cloud environments.
• Maintain and improve security policies, standards, procedures and playbooks.
• Produce incident documentation, root-cause analyses and after-action reviews.
• Mentor team members and collaborate with stakeholders to align controls with requirements.
• Guide deployment of critical initiatives with deep threat intelligence.

Skills

SIEM & SOAR

ATT&CK & Cyber Kill Chain

Blue Teaming

Endpoint protection

Cloud technologies

OS: Windows/macOS/Linux

Scripting: PowerShell/JavaScript/Py

Identity & Access Mgmt

HIPAA/NIST/Zero Trust

Vulnerability management

Security monitoring & IR

Risk analysis & mitigation

Networking & TCP/IP

Defense in Depth

Incident response playbooks

Threat hunting

Indicators of compromise

Cloud security

Forensics knowledge

Windows/Mac/Linux

Education

Associate’s degree in computer-related field

Two years cybersecurity experience in lieu of degree

Tools

SIEM

EPM

DLP

Firewalls/WAFs

Antivirus/Email protection

Job description

What you can expect!

Find joy in serving others with IEHP! We welcome you to join us in “healing and inspiring the human spirit” and to pivot from a “job” opportunity to an authentic experience!

Reporting to the Manager, Information Security Operations, the Engineer III – Security Analyst services as a senior cybersecurity practitioner and consultant, advancing the organization’s defensive posture across on-premises and cloud environments. This position maintains and improves security policies, standards, procedures, and response playbooks; produces clear incident documentation, root-cause analyses, and after-action review; and collaborates with business stakeholders to align security controls with organizational requirements. The Engineer III - Security Analyst mentors team members, evaluates emerging technologies, and champions continues improvement to mature security operations and ensure best practices. This position provides guidance to business units and technology stakeholders during the deployment of critical business and technology initiatives utilizing deep understanding of global threat actors and their tactics, techniques, and procedures employed during cyberattacks. This position supports various Information Technology Security functional areas related to one or more of the following: Application Security, Security Operations and Vulnerability.

Commitment to Quality: The IEHP Team is committed to incorporate IEHP’s Quality Program goals including, but not limited to, HEDIS, CAHPS, and NCQA Accreditation.

Perks

IEHP is not only committed to healing and inspiring the human spirit of our Members, but we also aim to match our team members with the same energy by providing prime benefits and more.

• Competitive salary
• State of the art fitness center on-site
• Medical Insurance with Dental and Vision
• Life, short-term, and long-term disability options
• Career advancement opportunities and professional development
• Wellness programs that promote a healthy work-life balance
• Flexible Spending Account – Health Care/Childcare
• CalPERS retirement
• 457(b) option with a contribution match
• Paid life insurance for employees
• Pet care insurance

Education & Requirements

• A minimum of eight (8) years of IT experience required with at least five (5) years in a cybersecurity role with a focus on protect, detect, and respond in addition to the following:
• Mitre ATT&CK and Cyber Kill Chain frameworks
• Establishing or participating in Blue Team exercises
• Computer operating systems such as Windows, MacOS and Linux
• System development lifecycle
• Deploying, managing, and using Security Operations tools such as SIEM, EPM, DLP, Vulnerability Management, Firewalls, WAFs, Antivirus Solutions, Email Protection Solutions, Incident Response and Threat hunting and management
• Scripting experience such as PowerShell, JavaScript, or Python
• Experience working with Identity and Access Control Management Tools
• Associate’s degree with a major in computer-related field or similar technical field from an accredited institution required
• In lieu of the required degree, a minimum of two (2) years of cybersecurity work experience is required
• This experience is in addition to the minimum years listed in the Experience Requirements above
• Relevant security certifications preferred

Key Qualifications

• Comprehensive knowledge and deep understanding of the following:
  • SIEM and SOAR
  • ATT&CK and Cyber Kill Chain frameworks
  • Blue Teaming
  • Endpoint protection technologies
  • Cloud technologies
  • OSI Model layers, IP Routing, TCP/IP Operation
  • Scripting experience such as PowerShell, JavaScript, or Python
  • Computer forensics knowledge and experience
  • Security standards such as HIPAA, NIST 800-53, NIST CSF, Zero Trust Architecture, and others
  • Vulnerability scanning technologies
  • Security monitoring and incident response
  • Risk analysis and risk mitigation strategies
  • Networking technologies and networking protocols with an emphasis on TCP/IP
  • Defense in Depth strategies
  • Security Operations Tools such as SIEM, EPM, DLP, Vulnerability scanners, Firewalls, WAFs, Antivirus Solutions, Email Protection Solutions, Incident Response and Threat Management
  • Advanced Persistent Threats (APT) and associated tactics
  • Identifying indicators of compromise and indicators of attack
  • Vulnerability management
  • Cloud security and/or technologies
  • Computer operating systems such as Windows, MacOS and Linux
• Strong planning, organization, critical thinking, decision-making and communication (verbal and written) skills
• Proven ability to:
  • Work as a member of a team
  • Show willingness to be flexible and adaptable to change in a dynamic work environment
  • Contribute and participate in team activities and planning regarding improving team skills, awareness, communication, reputation, and quality of work
  • Learn and apply new concepts
  • Work within a team to consistently learn and share advanced skills and foster team excellence
  • Stay up to date with current knowledge of industry trends and standards.
• Projects involving lift server appliance weights up to 50 lbs.; back brace must be worn with lifting 50 pounds or heavier

Start your journey towards a thriving future with IEHP and apply TODAY!