Cyber Security Analyst IV - Incident Response

We are so glad you are interested in joining Sutter Health!

Organization:

SHSO-Sutter Health System Office-Valley

Position Overview:

Responsible for providing data security support and guidance to Sutter Health operating units and affiliates for multi-faceted protection. Monitors data from the security solutions, and provides hands-on security administration of a broad range of security duties and requires a high level of technical experience. Duties and responsibilities include, but are not limited to, oversight of design, engineering, analysis, research, testing and monitoring. Serve as the most senior advisor to the Privacy and Information Security leadership as a subject matter expert on end point security, vulnerability management, Security Information and Event Management (SIEM) and/or Network Security.

Job Description:

***The selected candidate must be located within the Sutter Health footprint.***

EDUCATION:
Equivalent experience will be accepted in lieu of the required degree or diploma.

• Bachelor's in Business, Cyber Security, Risk Management, Information Technology, Computer Science or related field

TYPICAL EXPERIENCE:

• 8 years recent relevant experience.

PREFERRED EXPERIENCE:

• Demonstrated experience in planning, coordinating, integrating, and synchronizing cyber defense and prevention activities in support of organizational cybersecurity objectives.

• Proven ability to develop and deliver comprehensive, accurate, and actionable reports that effectively communicate risk profile impacts to both peers and senior management.

• Experience ensuring adherence to all applicable state and federal cybersecurity laws, regulations, and compliance requirements.

• Prior experience serving in an Incident Command role.

SKILLS AND KNOWLEDGE:

• Thorough knowledge of information systems security concepts and current information security trends and practices including security processes and methods.

• General knowledge of Federal and State IS security and privacy-related regulatory requirements and laws.

• General knowledge regarding National Institute of Standards and Technology (NIST), Health Insurance Portability and Accountability Act (HIPAA), Federal Information Processing Standards (FIPS), and other recognized industry security standards. and best practices.

• Detailed understanding of end point security technologies (Antivirus, Forensics, Anti-malware, HIPS)

• Detailed understanding of end point operating systems (Windows and Linux)

• In depth knowledge of cyber security solutions, policies and technologies

• Understanding of the lifecycle of a network threat and network vulnerability exploitation in a healthcare environment

• Working understanding of the anatomy of a cyber attack: advanced level of skill using Microsoft windows workstation and server, Unix/Linux and network Os’s, proven ability to use internet technologies including dns, routing, smtp, http, dhcp, and ftp etc.

• Technical skills in planning, administration, and management of information systems, operational and technical security controls, and security risk analysis and management

• Written/verbal interpersonal communication skills with the ability to interact effectively with a broad and diverse group of peers, users, and executives.

• Proven ability to prioritize work while multi-tasking on assigned work.

• Demonstrated ability to acquire images, either remote or local, to a workstation or server.

• Proven ability to conduct forensics activities in the context of an active attack.

• Technical skills in end point security controls, such as acls, hips, registry, logging, and forensics.

• Ability to perform and conduct incident response and participate in security incident and post incident response process

• Proven ability to break down highly complex technical topics into language and diagrams understandable to a wide audience

These Principal Accountabilities, Requirements and Qualifications are not exhaustive, but are merely the most descriptive of the current job. Management reserves the right to revise the job description or require that other tasks be performed when the circumstances of the job change (for example, emergencies, staff changes, workload, or technical development).

Job Shift:

Days

Schedule:

Full Time

Days of the Week:

Monday - Friday

Weekend Requirements:

As Needed

Benefits:

Yes

Unions:

No

Position Status:

Exempt

Weekly Hours:

40

Employee Status:

Regular

Sutter Health is an equal opportunity employer EOE/M/F/Disability/Veterans.

Pay Range is $150,300.80 to $240,489.60 / annual salary

The compensation range may vary based on the geographic location where the position is filled. Total compensation considers multiple factors, including, but not limited to a candidate’s experience, education, skills, licensure, certifications, departmental equity, training, and organizational needs. Base pay is only one component of Sutter Health’s comprehensive total rewards program. Eligible positions also include a comprehensive benefits package.