Epic Applications Security Analyst

VHC Health; Alabama; On-site; USD 90,000 - 120,000; Full time

Job summary

VHC Health in Alabama is seeking an Epic Applications Security Analyst to protect information systems and ensure secure Epic logging and access. You will monitor security incidents, coordinate Epic security across app teams, and strengthen the overall security posture.

The role requires a Bachelor's degree and 3+ years in IT security, with experience in UNIX/Windows, vulnerability scanning, and web app security. Epic security experience is a plus.

Qualifications

• Bachelor's degree in computer engineering, computer science, or information systems management.
• At least 3 years of IT security experience.
• Experience with UNIX and Windows operating systems.
• Knowledge of vulnerability scanning tools (Qualys, Nessus, Nexpose, Saint).
• Experience with web app vulnerability scanners (Burp Suite Pro, AppScan, Fortify).
• Experience with static analysis tools (AppScan Source, Fortify).

Responsibilities

• Respond to security incidents and events and analyze risks.
• Coordinate security efforts between Epic application teams.
• Ensure authorized users log in to Hyperspace with proper security.
• Conduct assessments of security posture and recommend improvements.

Skills

Unix

Windows OS

Risk assessment

Vulnerability scanning

Web app security

Static analysis tools

Programming: Java/C/C++/.NET

Web development: ASP.NET/ASP/PHP/J2EE

Epic application security

Education

Bachelor's degree in computer engineering, computer science, or information systems management

Equivalent combination of education and experience

Tools

Qualys

Nessus

Nexpose

Saint

IBM AppScan

Burp Suite Pro

HP Fortify

AppScan Source

Job description

Position Title

Epic Applications Security Analyst

Job Description

Purpose & Scope

Member of a team that manages and monitors the safety of information systems assets and protects systems from intentional or inadvertent access or destruction. Has a specific focus on the Epic system. Coordinates security efforts between Epic application teams. Ensures that authorized users are able to successfully log in to Hyperspace with the appropriate security to complete their job in the system. Responds to, analyzes, and resolves Information Security issues, concerns, questions, incidents and events. Identifies and evaluates risks and threats. Makes resourceful, practical decisions and addresses unexpected problems. Conducts evaluations of current information security posture and recommends approaches to strengthen as appropriate.

Education

Bachelor's degree in computer engineering, computer science, or information systems management or approved equivalent combination of education and experience. Three years of additional related experience may be substituted in lieu of educational requirement.

Experience

• Minimum three years of experience in the information technology field, preferably concentrated in information security.
• Experience with and knowledge of UNIX operating systems desired and Microsoft operating systems required; risk and threat assessment process and practices; project planning and management; business continuity planning, documentation and evaluation
• Experience with vulnerability scanning tools (e.g., Qualys, Nessus, Nexpose, Saint)
• Experience with web application vulnerability scanning tools (e.g., IBM AppScan, HP Webinspect, Accunetix, NTO Spider, Burpsuite Pro)
• Experience with static analysis tools (e.g., IBM Appscan Source, HP Fortify)
• Experience with high level programming languages (e.g., Java, C, C++, .NET (C#, VB))
• Experience with web application development (e.g., ASP.NET, ASP, PHP, J2EE, JSP)
• Experience with Epic application security a plus

Certification/Licensure

None.

Additional Job Description

At VHC Health, every role contributes to exceptional care, better outcomes, and stronger communities. In addition to your base compensation, VHC Health offers a comprehensive benefits package, including medical, dental, and vision coverage (subject to eligibility requirements), as well as additional wellness and retirement benefits designed to support our employees and their families. VHC Health is committed to wage transparency and equitable pay practices. The compensation offered for this position—whether expressed as an annual salary or hourly rate is determined based on a variety of legitimate, non‑discriminatory factors. These factors include, but are not limited to, a candidate's qualifications, relevant training and experience, skill level, shift differentials (where applicable), internal equity, and current market conditions. The posted hiring range reflects the range VHC Health, in good faith, believes is appropriate for this role at the time of posting. This range may be adjusted in the future based on business needs or market changes. No portion of compensation is considered earned until it is vested and determined in accordance with the terms of applicable policies and benefit plans. The availability and amount of any bonuses, incentives, or other benefits are subject to the terms of those plans and may be modified at the sole discretion of VHC Health, in accordance with applicable law. VHC Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, pregnancy (including childbirth, pregnancy‑related conditions and lactation), race, religion, sex, sexual orientation, veteran status, genetic information, or any other characteristics protected by law. VHC Health maintains a drug‑free workplace. The unlawful manufacture, distribution, dispensing, possession, or use of a controlled substance is prohibited at all VHC Health locations.