IT SECURITY ANALYST III

Johns Hopkins Medicine; Hanover (MD); Hybrid; USD 41,000 - 73,000; Full time

Benefits offered by this job

Hybrid work in Hanover

Medical, dental, Vision insurance

403(b) with employer contribution

Paid time off

Wellness programs

Job summary

Johns Hopkins Medicine is seeking an IT Security Analyst III in Hanover, MD, a hybrid role requiring on-site presence at least quarterly. The position involves implementing security engineering across JHHP information systems, monitoring posture, and guiding vulnerability management.

A DoD-aligned mindset with SIEM and cloud-secure experience is preferred. Applicants should have a background in LAN administration or network engineering and experience with SIEM tools, cloud security, and

Qualifications

• 2+ years in LAN Administration or Network Engineering.
• Hands-on cybersecurity in Security Operations, Threat Detection, Incident Response, or Vulnerability Management preferred.
• Experience securing cloud environments (Azure Gov and/or AWS GovCloud).
• Proven experience with SIEM, EDR, vulnerability tools, and network security technologies.
• Strong knowledge of NIST SP 800-171, CMMC 2.0, and continuous monitoring practices.

Responsibilities

• Implement and support information security engineering for Johns Hopkins Health Plans information systems.
• Monitor security posture and coordinate with LAN Administrators and Network Engineers to address vulnerabilities.
• Prepare for and assist the annual audit; maintain security tools and knowledge.

Skills

LAN Administration

Network Engineering

Cloud security

NIST SP 800-171

CMMC 2.0

Threat hunting

Incident investigations

Root cause analysis

Security operations

Vulnerability management

Education

4 year college degree + 2 years exp

Associate’s degree + 3 years exp

4 years experience in security position

Industry certification + 2 years exp

Tools

SIEM (Splunk)

EDR

Tenable

Palo Alto

Job description

Who we are:

Johns Hopkins Health Plans (JHHP) is the managed care and health services business of Johns Hopkins Medicine. JHHP is a $3B business serving over 500,000 active members with lines of business in Medicaid, Medicare, commercial, military health, health solutions, and venture investments. JHHP is a leader in provider-sponsored health plans and is poised for future growth.

Many organizations talk about transforming the future of healthcare, at Johns Hopkins Health Plans, we are setting the pace for change within the healthcare industry. We develop innovative, analytics-driven health programs in collaboration with provider partners to drive improved quality and better health outcomes for our members and the communities we serve.

What awaits you:

• Work-life balance - This is a hybrid role-Hanover, MD. Must report on site at least quarterly. Applicants living in MD, DC, VA, PA, DE, or FL will be given first consideration.
• Medical, Dental, and Vision Insurance.
• 403B Savings Plan w/employer contribution.
• Paid Time off & Paid holidays.
• Health and wellness programs and MORE!

Position Summary:

The IT SECURITY ANALYST III is responsible for implementing and supporting information security engineering for all Johns Hopkins Health Plans (JHHP) information systems. Reviews regulatory security policies, as well as best practices, and develops the technical solution required in order to implement those requirements on servers, routers, firewalls and other LAN/WAN equipment. Works with the LAN Administrators and Network Engineers to monitor the security posture of all networked systems and takes appropriate steps to quickly deal with any vulnerabilities. Provides network and security engineering expertise and guidance for all aspects of information assurance (IA), including those systems required to meet DoD regulations and requirements. Supports the year-round work of maintaining security posture to meet DoD DIACAP requirements. Works with the other members of the Information Security team to prepare for and successfully pass the annual audit. Maintains technical expertise on all JHHP networked hardware and software and appropriate security tools for those products.

Experience needed:

• A minimum of two years’ experience in a LAN Administration or Network Engineering position.
• Previous hands‑on cybersecurity experience in a Security Operations, Threat Detection, Incident Response, or Vulnerability Management role preferred.
• Demonstrated experience securing cloud environments (Azure Government and/or AWS GovCloud)
• Proven experience with SIEM (e.g., Splunk), EDR, vulnerability management tools (e.g., Tenable), and network security technologies (e.g., Palo Alto)
• Strong working knowledge of NIST SP 800-171, CMMC 2.0, and continuous monitoring practices
• Experience conducting incident investigations, threat hunting, and root cause analysis
• Background in network engineering or system administration is preferred, but dedicated cybersecurity experience is required

Education:

• A 4 year college degree plus 2 years’ experience in a network or security-related position

OR

• an Associate’s degree plus 3 years’ experience in a security-related position

OR

• 4 years’ experience in a security-related position

OR

• current industry certification plus 2 years of experience in a network or security-related position

Required Licensure, Certification:

• Security + or CISSP strongly preferred

Salary Range: Minimum $30.08/hour - Maximum $52.65/hour. Compensation will be commensurate with equity and experience for roles of similar scope and responsibility.

In cases where the range is displayed as a $0 amount, salary discussions will occur during candidate screening calls, before any subsequent compensation discussion is held between the candidate and any hiring authority.

JHM prioritizes the health and well-being of every employee. Come be healthy at Hopkins!

Diversity and Inclusion are Johns Hopkins Medicine Core Values. We are committed to creating a welcoming and inclusive environment, where we embrace and celebrate our differences, where all employees feel valued, contribute to our mission of serving the community, and engage in equitable healthcare delivery and workforce practices.

Johns HopkinsHealth Systemand its affiliatesare an Equal Opportunity /Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, mental or physical disability, genetic information, veteran status, or any other status protected by federal, state, or local law.

Johns Hopkins Health System and its affiliates are drug-free workplace employers.