Security Analyst

CENTER FOR HEALTH INFORMATION AND ANALYSIS; Boston (MA); Hybrid; USD 76,000 - 113,000; Full time

Benefits offered by this job

Hybrid work model

Flexible Spending Account

Retirement Savings Plan

Dental and Vision Plans

Job summary

The Center for Health Information and Analysis (CHIA) is seeking a Security Analyst I to support information security applications, present cybersecurity metrics, and help evolve CHIA’s secure cloud environment. The role becomes a security engineer over time and includes audits, risk assessments, incident response, and vendor coordination.

Hybrid work with Boston office access, strong compensation, and comprehensive benefits underline CHIA’s commitment to secure healthcare information and

Qualifications

• Experience in IT security field or equivalent.
• Associate degree may substitute for experience.
• Strong English reading and writing skills.

Responsibilities

• Cloud security reporting and hardening of assets.
• Mine and normalize security metrics for enterprise reports.
• Coordinate cyber security reports, alarms and notifications.
• Administer privileged monitoring of agency IT systems.
• Support risk assessments, vulnerability and incident response.
• Conduct threat research and update defense-in-depth strategies.
• Assist in IT audits and policy compliance checks.
• Analyze malware and suggest anti-malware improvements.
• Participate in annual cyber security awareness training.
• Maintain security systems and vet new software.
• Assist with Azure cloud security configurations.

Skills

Information assurance

Cybersecurity

Systems analysis

IT audit

Reading and writing English

Education

Bachelor's degree in a related field

Associate’s degree in a related field

Tools

Active Directory

Microsoft 365

Azure security

Cisco firewall

Palo Alto firewall

Job description

The mission of the Center for Health Information and Analysis (CHIA) is to monitor the Massachusetts health care system and to provide reliable information and meaningful analysis for those seeking to improve health care quality, affordability, access, and outcomes.

Reporting to the Deputy Chief Information Security Officer (Deputy CISO), the Security Analyst I will support Information Security applications, work with and present Cybersecurity metrics and reports, and be a major resource in CHIA’s continuous transformation towards its secure cloud environment. This position will continuously improve upon CHIA’s Cybersecurity program and security processes, evolving over time into a security engineer role. Ancillary tasks for this role will include participation in periodic internal IT audits and risk assessments, CSIRT (Cyber Security Incident Response Team) duties where applicable, production of procedural documentation, security product research, vendor management, and any related duties assigned by the CISO.

Specifically, the Security Analyst will do the following:

• Cloud Security Reporting: Work with CHIA’s various IT departments to secure network, application, and database infrastructure and tools in the cloud. Work closely with the team to continuously look for ways to harden and protect CHIA’s assets.
• Security Infrastructure Metrics: Mine metrics from security infrastructure (applications, databases, network appliances, servers), aggregate, and normalize to facilitate reporting on enterprise security
• Security Reporting: Coordinate and generate cyber security related reports, alarms, and notifications; Identify reporting gaps and take appropriate steps to remediate
• Monitoring: Administer privileged/trusted monitoring of agency computers and IT systems at the direction of the CISO or CIO
• Core Cyber Security Process Support: Support the execution of risk assessments, vulnerability and threat assessments, incident response, and cyber security awareness
• Threat Research: Perform threat research and leverage it to improve the effectiveness of our safeguards and defense-in-depth strategy. Stay current with cyber security trends, best practices, and developments on topics such as emerging threats, containment and eradication of malware, and incident response, and act as a team resource for this information
• IT Audit Support: Support the CISO in auditing systems, user accounts, databases, and applications for policy compliance, e.g. least privilege, appropriate security controls, timely security patching, unique user accounts.
• Security Incident Root Cause Analysis: Analyze malware infections and recommend improvements to anti-malware technology, tactics, or procedures where applicable
• Security Training: Participate in annual employee training sessions to improve Cyber Security awareness throughout the agency
• Ongoing Maintenance: Perform regular maintenance operations on primary Security systems/applications to keep them patched and current
• Vet software:Vet new software before it is introduced into CHIA’s production network
• Azure Cloud Support: Support the configuration of security components, connectivity and networks in CHIA’s cloud computing environment.

Total Compensation:

We value the talent and expertise you bring to the table. The salary range for this position is expected to be $75,826.40 - $112,960.38. The final offer will be based on the candidate’s skills, experience, and qualifications, as well as applicable Commonwealth guidelines. CHIA may adjust title, responsibilities, and salary depending on the experience and expertise of the individual selected.

Hybrid Work:

We foster a flexible, collaborative environment, offering a hybrid model that balances in-person and remote work. Our hybrid approach allows you to work alongside your colleagues in our vibrant Boston office at 501 Boylston Street for at least two designated days per week, with the flexibility to work remotely on others.

Comprehensive Benefits:

When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you, your loved ones, and your future.

Together, let's embark on a journey of meaningful impact on healthcare. We invite you to join CHIA, where your expertise will shape the future of healthcare in Massachusetts.Likewise, we're eager to take a chance on you - to welcome a dedicated professional who shares our passion for making a difference. Join us in this collaborative endeavor, where we'll forge new paths, innovate, and lead the way toward a healthier Commonwealth.

Minimum Entrance Requirements:

Security Analyst I:

Applicants must have (A) at least one (1) years of full-time or equivalent part-time professional or practical experience in the field of information technology security, or (B) any equivalent combination of the required experience and the substitutions below.

Substitutions:

An associate’s degree in a related field may substitute for the required experience.

Security Analyst II:

Applicants must have (A) at least two (2) years of full-time or equivalent part-time professional or practical experience in the field of information technology security, or (B) any equivalent combination of the required experience and the substitutions below.

Substitutions:

• An Associate’s degree in a related field may substitute for one (1) year of the required experience.
• A Bachelor’s degree or higher in a related field may substitute for the required.

Preferred Qualifications:

• Strong experience in information assurance, Cybersecurity, systems analysis, IT audit, or related specialization, or commensurate higher education
• High level of proficiency in reading and writing English
• Microsoft Enterprise technologies such as Active Directory and Microsoft 365
• Microsoft Azure security, connectivity, and network components
• In-depth knowledge of network security and firewall technologies, including but not limited to, Cisco and Palo Alto
• Understanding of HIPAA compliance requirements Preferred Character Traits:
• Recognizes opportunities for addressing IT issues, risks, and exposures
• Maintains strong liaison and working relationships
• Works efficiently and diligently to resolve security problems and help desk tickets
• Accepts responsibility and personal accountabilityPossesses strong interpersonal skills
• Writes clear and concise documentation and procedures Total Compensation:

As an employee of the Commonwealth of Massachusetts, you are offered a great career opportunity influencing a wide spectrum of services to the diverse populations we serve - but it's more than a paycheck. The State's total compensation package features an outstanding set of employee benefits which you should consider regarding your overall compensation, including:

• 75% state paid medical insurance premium
• Reasonable Dental and Vision Plans
• Flexible Spending Account and Dependent Care Assistance programs
• Low cost basic and optional life insurance
• Retirement Savings: State Employees' Pension and a Deferred Compensation 457(b) plan
• 11 paid holidays per year and competitive Sick, Vacation and Personal Time
• Tuition Benefit for employee and spouse at state colleges and universities

This position is designated as a confidential non-union and non-managerial Security Job Family Level I; Security Analyst I position with the Data Operations and Technology Unit.

Salary Full Range:

Security Analyst I: ITTA - Level 1, $75,826.40 - $112,960.38

Security Analyst II: ITTA – Level 2, $84,407.18 - $125,924.24

CHIA offers a flexible, collaborative hybrid work model that balances in-person and remote work. Employees work from our Boston office at 501 Boylston Street at least two designated days per week, with the flexibility to work remotely on other days.

An Equal Opportunity / Affinite Action Employer. Females, minorities, veterans, and persons with disabilities are strongly encouraged to apply.

The Commonwealth is an Equal Opportunity Employer and does not discriminate on the basis of race, religion, color, sex, gender identity or expression, sexual orientation, age, disability, national origin, veteran status, or any other basis covered by appropriate law. Research suggests that qualified women, Black, Indigenous, and Persons of Color (BIPOC) may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage individuals who believe they have the skills necessary to thrive to apply for this role.

Information submitted by applicants is collected through the JazzHR Platform, your submission of application materials constitutes your express consent for this information to be provided to JazzHR for processing. Please do not include any personally identifiable information with your application materials other than that specifically requested by CHIA. CHIA requests basic information such as name, address, telephone number, and email address. You may also self-identify with your race/ethnicity, gender, disability and/or veteran status. However, you should not provide more detailed personal information such as your date of birth or Social Security Number with your application materials.