Security Analyst III

Posted:
10/9/2024, 9:00:38 AM

Location(s):
Minnesota, United States ⋅ Mendota Heights, Minnesota, United States

Experience Level(s):
Senior

Field(s):
IT & Security

Workplace Type:
Hybrid

Anticipated End Date:

2024-12-03

Position Title:

Security Analyst III

Job Description:

Security Analyst III


Location: This position will work a hybrid model (remote and office). Ideal candidates will live within 50 miles of the following PulsePoint location. 1285 Northland Dr., Mendota Heights, MN 55120

Hours: Monday to Friday, 8:00 am to 5:00 pm

The Security Analyst III will provide trouble resolution on complex problems and lead implementations for system and network security technologies.

How you will make an impact:


•    Develop testing plans to ensure quality of implementation.
•    Coordinate and prepare the reporting of data security events and incidents.
•    Provide system and network architecture support for information and network security technologies.
•    Provide technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies.
•    Represent major upgrades and reconfigurations in change control.
•    Design & analyze mix of vendor services meeting business and information security requirements.
•    Maintain relationship with key vendors.
•    Lead lights on initiatives to consolidate equipment and implement business relocations; determine and perform complex configuration changes to meet business and information security requirements.
•    Perform capacity analysis.
•    Recommend and implement capacity increases.
•    Serve as the technical escalation for results of preventative maintenance routines.
•    Supervise preventative maintenance.
•    Represent infrastructure security support in significant projects and perform the most complex operations and administration tasks.
•    Respond to level 3 & 4 change and problem requests without supervision.
•    Lead level 1 & 2 incident recoveries and root cause analysis.
•    Review and respond to EDR alerts.
•    Maintain and deploy host based firewall policies.
•    Monitor Vulnerability Scan Results via Dashboard.
•    Initiate ad-hoc and manual Vulnerability Scans as needed.
•    Document and track vulnerability remediation status.
•    Respond to and investigate vulnerability alerts received from CMS CCIC.
•    Review and investigate notable events using Splunk.
•    Monitor and support Data Loss Prevention efforts (logs/infrastructure support).
•    Support and maintain security orchestration, automation, and remediation (SOAR) tools and use cases.
•    Monitor intrusion detection systems, including patching and maintenance of IDS signatures.
•    Provide infrastructure and administrative support for Continuous Diagnostics and Monitoring (CDM) efforts.
•    Maintain software whitelisting application and infrastructure, reviewing and responding to requests for changes to update rules, in accordance with established policies.

Minimum Requirements: 

Bachelor’s degree in Computer Science, Information Technology, or a related field. Three (3) years of experience in related occupation(s).

Additional Requirements:

Three (3) years of experience must include: 
•    Three (3) years of experience in a support and operations or design and engineering role. 
•    Three (3) years of experience in industry-accepted data processing controls and concepts as applied to hardware, software, data, network communications, and people. 
•    One (1) year of experience working in a Security Operations Center or in a Security Analyst role. 
•    One (1) year of experience with at least one common industry security frameworks (NIST, ISO, or HIPPA). 
•    One (1) year of experience participating in internal and external assessments and audits.
•    One (1) year of experience with at least one of the following categories of enterprise security platforms: (a) intrusion prevention and detection tools; (b) security event and incident management tools; (c) anti-virus, anti-malware, and data loss prevention systems; or (d) vulnerability scanning, management, and tracking.
 

Job Level:

Non-Management Exempt

Workshift:

Job Family:

IFT > IT Security & Compliance

Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health.

Who We Are

Elevance Health is a health company dedicated to improving lives and communities – and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve.

How We Work

At Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business.

We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.

Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process. Candidates must reside within 50 miles or 1-hour commute each way of a relevant Elevance Health location.

The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws.

Elevance Health is an Equal Employment Opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact [email protected] for assistance.