Sr. II Security Analyst - Vulnerabilities

NYU Langone Health; New York (NY); On-site; USD 98,000 - 143,000; Full time

Job summary

NYU Langone Health, a leading academic medical center, seeks a Sr. II Security Analyst to join the Vulnerabilities team. The role focuses on identifying and remediating security gaps across servers, applications, and infrastructure.

You will review security event data and drive remediation with IT stakeholders. The ideal candidate has 6+ years in IT security within healthcare or academe, strong governance experience, and the ability to communicate across all levels.

Qualifications

• Bachelor's degree required; Master's preferred.
• Minimum 6 years in IT security policy and compliance within healthcare or academic medical centers.
• Experience with IT security governance, security scorecards, and deadlines management.
• Ability to communicate effectively with all organizational levels.

Responsibilities

• Run weekly and on-demand vulnerability scans using Rapid7 InsightVM.
• Analyze data and produce reports based on preset criteria.
• Coordinate remediation with infrastructure teams and application owners.
• Analyze threat intelligence and write risk analyses for zero-day vulnerabilities.
• Develop scripts/macros to automate tasks and improve security posture.
• Work with stakeholders to harden systems and secure applications.

Skills

IT governance

Security policy

Risk management

Communication skills

Deadline-driven

Education

Bachelor's degree

Master's degree preferred

Tools

Rapid7 InsightVM

Checkmarx

Ivanti

Job description

NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone the No. 1 comprehensive academic medical center in the country for three years in a row, and U.S. News & World Report recently placed nine of its clinical specialties among the top five in the nation.

NYU Langone offers a comprehensive range of medical services with one high standard of care across 6 inpatient locations, its Perlmutter Cancer Center, and over 320 outpatient locations in the New York area and Florida. With $14.2 billion in revenue this year, the system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise with over $1 billion in active awards from the National Institutes of Health.

For more information, go to NYU Langone Health, and interact with us on LinkedIn, Glassdoor, Facebook, Twitter, YouTube and Instagram.

Position Summary

We have an exciting opportunity to join our team as a Sr. II Security Analyst - Vulnerabilities. In this role, the successful analyst will be part of the Penetration Testing and Vulnerabilities Management team. The group is an agile team that effectively test and manage security vulnerabilities for the Medical Center. As a member of the team, the analyst will review a large volume of security event data from a variety of sources with the goal of identifying vulnerabilities and following up with remediation.

Job Responsibilities

• Run weekly and on-demand vulnerability scan with Rapid7(InsightVM)
• Perform data analysis and report based on preset criteria
• Proactively discover and enumerate vulnerabilities that may not be caught by our scanning tool (e.g. devices default passwords and open Windows shares)
• Coordinate remediation efforts with infrastructure teams and application owners
• Analyze threat intelligence reports, write risk analysis report for zero-day critical vulnerabilities
• Write custom scripts and macros to accomplish and/or automate tasks as needed
• Work with infrastructure and all other stakeholders to remediate/mitigate vulnerabilities
• Work with stakeholders to harden equipment, operating systems and applications
• Using Checkmarx, work with development teams to improve app security via secure coding practices
• Manage 30+ servers that fall under our group's purview (InsightVM, Checkmarx), including daily maintenance, patch and upgrade
• Conduct security product evaluation and recommendation
• Propose and draft security standards
• Work tickets assigned to IT Security in Ivanti ticketing system

Minimum Qualifications

To qualify you must have a Bachelor's degree from an accredited college/university; Master's degree from an accredited college/university preferred

Minimum 6 years of progressive experience in IT security policy and compliance management programs for healthcare or academic medical centers; interaction with and support of clients; risk management and other GRC responsibilities within a large healthcare organization.

Demonstrated experience with IT security governance, security education, security scorecards, and ability to work under aggressive deadlines with competing priorities.

Qualified candidates must be able to effectively communicate with all levels of the organization.

NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.

At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. Our offerings provide a robust support system for any stage of life, whether it's developing your career, starting a family, or saving for retirement. The support employees receive goes beyond a standard benefit offering, where employees have access to financial security benefits, a generous time-off program and employee resources groups for peer support. Additionally, all employees have access to our holistic employee wellness program, which focuses on seven key areas of well-being: physical, mental, nutritional, sleep, social, financial, and preventive care. The benefits and wellness package is designed to allow you to focus on what truly matters. Join us and experience the extensive resources and services designed to enhance your overall quality of life for you and your family.

NYU Langone Health is an equal opportunity employer and committed to inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration.

View Know Your Rights: Workplace discrimination is illegal.

NYU Langone Health provides a salary range to comply with the New York state Law on Salary Transparency in Job Advertisements. The salary range for the role is $97,589.95 - $142,987.71 Annually. Actual salaries depend on a variety of factors, including experience, specialty, education, and hospital need. The salary range or contractual rate listed does not include bonuses/incentive, differential pay or other forms of compensation or benefits.

To view the Pay Transparency Notice, please click here