Lead Cyber Security Specialist - Remote (WFH)

Franciscan Alliance, Inc.; Indianapolis (IN); À distance; USD 97 000 - 133 000; Plein temps

Résumé du poste

Franciscan Alliance, Inc. is seeking a Cyber Security Specialist Lead to orchestrate security operations, threat hunting, and incident response. The role emphasizes advanced SPLUNK expertise, monitoring, and proactive defense across healthcare environments.

You will lead investigations, develop detections, and guide analysts through incident lifecycles while coordinating with security teams and external partners. Strong leadership and in-depth SIEM/SOAR skills are required.

Qualifications

• Degree requirements include an Associate's or Bachelor's degree; professional certificates preferred.
• 8 years Information Technology or Information Security experience.
• Healthcare industry security operations experience preferred; Essential Job Functions.
• Travel is required: Never or Rarely.
• Salary range provided for the Cyber Security Specialist Lead position.

Responsabilités

• Develop roadmaps and implementation plans for security technologies.
• Write and optimize SPL queries to identify and investigate suspicious activity; threat hunting across security data.
• Create, test, tune, and maintain high-fidelity detections; reduce false positives; use risk-based alerting; set thresholds and governance.
• Lead the SOC during investigation of high-severity incidents; guide analysts through the response lifecycle.
• Develop, maintain, and execute SOAR playbooks; automate enrichment and response tasks.
• Understand security data sources, data models, CIM; troubleshoot data quality issues; validate detections against reliable data.
• Serve as technical escalation point; coach analysts; establish investigation standards; communicate with SOC management.
• Build Splunk dashboards and reports to measure data sources, alert volume, and detection performance.
• Build detections for anomalous user and entity behavior; investigate compromised accounts and lateral movement.
• Work with internal resources and external 3rd parties to conduct penetration tests.
• Create and review cyber security policies, procedures, and standards related to SOC, Vulnerability Management, and Incident Response processes.

Connaissances

SPLUNK

SOC operations

Threat hunting

Incident response

Penetration testing

Formation

Associate's Degree

Bachelor's Degree

Certificate

Outils

SIEM

SOAR

Description du poste

Franciscan Alliance, Inc. is seeking a Cyber Security Specialist Lead to orchestrate security operations, threat hunting, and incident response. The role emphasizes advanced SPLUNK expertise, monitoring, and proactive defense across healthcare environments.

You will lead investigations, develop detections, and guide analysts through incident lifecycles while coordinating with security teams and external partners. Strong leadership and in-depth SIEM/SOAR skills are required.