Information Security Analyst (Red Team)

Point32Health; Town of Canton (NY); Hybrid; USD 91,000 - 137,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Retirement plans

Paid time off

Life and disability insurance

Tuition program

Well-being benefits

Job summary

Point32Health is seeking a Security Analyst to simulate real-world cyber threats, evaluate security controls, and improve response processes. You will work with IT teams across the organization under the Cybersecurity Manager.

The role emphasizes adversary emulation, penetration testing, social engineering, and security exercises to reduce risk. Required are a CS IT security focus, 3–5 years of experience, and strong knowledge of IAM, SIEM, and cloud security.

Qualifications

• Bachelor’s degree in computer science with emphasis on IT security required or equivalent experience.
• Master’s degree preferred.
• 3–5 years of professional experience in information services with 3 years in security and compliance with federal regulations.

Responsibilities

• Consult with Security staff to evaluate and implement security software.
• Monitor security logs and report security metrics.
• Participate in audits and project teams as required.
• Develop security policy documentation and user awareness training.
• Support security operations and incident response activities.

Skills

Identity and Access Management

SailPoint Identity Management

PingFederate

SiteMinder/Identity Manager/Provisiong

CyberArk PAM

Cloud security

Active Directory

LDAP Directory Services

Perl

Python

VBS

Java

Vulnerability scanning

IDS/IPS

Malware protection

Advanced Threat Protection

Public Key Infrastructure

Data Loss Prevention

Microsoft O365

Firewalls

VPN

Forensics

Mobile application security

Data warehouses/ETL

SIEM

N-tiered infrastructure

Windows/UNIX

Web servers (Tomcat/WebLogic/WebSphere

CRM/Salesforce

Excellent communication

Education

Bachelor's degree in computer science with IT security emphasis

Master’s degree

Job description

Who We Are

Point32Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point32Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We’ve had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are. We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work.

We enjoy the important work we do every day in service to our members, partners, colleagues and communities. Learn more about who we are at Point32Health.

Job Summary

This position is responsible for simulating real-world cyber threats to evaluate the effectiveness of the organization’s security controls, detection capabilities, and response processes. This role conducts adversary emulation, penetration testing, social engineering assessments, and security exercises to identify vulnerabilities, improve the organization’s overall security posture, validate security investments, and reduce cyber risk. Reporting to the Cybersecurity Manager, the Security Analyst will work closely with IT teams across all threads where security applies.

Job Description

Key Responsibilities/Duties – what you will be doing (top five):

• Consult with Security and Infrastructure Services staff to evaluate and implement software systems that provide appropriate security.
• Communicate potential security exposures, misuse, or noncompliance situation to appropriate managers.
• Monitor security logs to identify potential security related events. Capture and report security metrics.
• Monitors security trends and assess potential uses of new technologies to meet identified business goals.
• Analyze business requirements and risks to technology implementation for security-related issues.
• Develop and produce systems monitoring and metrics reports and assess the content.
• Work with Technical Writers to document and review security policy and procedures.
• Participate in audits both internal and external as required.
• As required, participate on project teams, and manage the completion of all assigned project related tasks.
• Train information owners in the implementation of necessary security controls by developing and presenting information security awareness.
• Other duties as assigned

Qualifications – what you need to perform the job

Certification and Licensure

Education

• Required (minimum): Bachelor’s degree in computer science with emphasis on IT security required or equivalent experience.
• Preferred: Master’s degree

Experience

• Required (minimum): 3-5 years of professional experience
• Preferred: 5-7 years of progressive experience in information services including 3 years in systems security, including maintenance and use of security products in a distributed enterprise environment, and experience in compliance with federal security regulations.

Skill Requirements

• Specific working knowledge of and experience in the following work environments:
  • Identity and Access Management
  • SailPoint Identity Management
  • PingFederate
  • SiteMinder/Identity Manager/Provisioning Manager
  • CyberArk PAM
  • Cloud security
  • Active Directory
  • LDAP Directory Services
  • Perl, Python, VBS and Java.
  • Vulnerability scanning and management
  • Intrusion Detection/Prevention System
  • Virus & malware protection
  • Advanced Threat Protection
  • Public Key Infrastructure
  • Data Loss Prevention
  • Microsoft O365
  • Firewalls
  • VPN
  • Forensics
  • Mobile application security
  • Operational data stores, data marts, data warehouse
  • Security Information and Event Management (SIEM)
  • N-tiered infrastructure patterns
  • Windows and UNIX operating system environments
  • Web portal technology and application servers, i.e. Apache Tomcat, WebLogic, WebSphere
  • Data/Computer Operations technology integration and support
  • CRM solutions/Salesforce
• Excellent communications skills both written and oral

Working Conditions and Additional Requirements (include special requirements, e.g., lifting, travel)

• Must be able to work under normal office conditions and work from home as required.
• Work may require simultaneous use of a telephone/headset and PC/keyboard and sitting for extended durations.
• May be required to work additional hours beyond standard work schedule.

Disclaimer

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of employees assigned to this position. Management retains the discretion to add to or change the duties of the position at any time.

Salary Range

$91,188.71 -$136,783.07

Compensation & Total Rewards Overview

The annual base salary range provided for this position represents a range of salaries for this role and similar roles across the organization. The actual salary for this position will be determined by several factors, including the scope and complexity of the role; the skills, education, training, credentials, and experience of the candidate; as well as internal equity. As part of our comprehensive total rewards program, colleagues are also eligible for variable pay. Eligibility for any bonus, commission, benefits, or any other form of compensation and benefits remains in the Company’s sole discretion and maybe modified at the Company’s sole discretion, consistent with the law.

Point32Health offers their Colleagues a competitive and comprehensive total rewards package which currently includes:

• Medical, dental and vision coverage

• Retirement plans

• Paid time off

• Employer-paid life and disability insurance with additional buy-up coverage options

• Tuition program

• Well-being benefits

• Full suite of benefits to support career development, individual & family health, and financial health

For more details on our total rewards programs, visit https://www.point32health.org/careers/benefits/

We welcome all

All applicants are welcome and will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.