Programmer Analyst Info Security

Position Summary

At Stony Brook Medicine, the Program Analyst Information Security supports the organization's information security program. This role assists with monitoring security events, responding to incidents, reviewing potential security risks, supporting compliance efforts, promoting security awareness, and protecting organizational data and systems.

Duties

• Monitor and triage security alerts from various security tools and platforms.
• Assist with investigating suspicious activity, phishing reports, and potential security incidents.
• Support user account security reviews, access management, and identity protection efforts.
• Aid in vulnerability management activities, including tracking remediation efforts.
• Review and document security events, incidents, and operational procedures.
• Support compliance initiatives, audits, and security assessments.
• Help maintain security documentation, standards, and procedures.
• Aid in security awareness and training activities for employees.
• Research emerging threats, vulnerabilities, and cybersecurity best practices.
• Work closely with Information Technology and business teams to address security concerns.
• Participate in security projects and other duties as assigned.

Qualifications

• Associate degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 2 years of experience in Information Security or an IT related field.
• Basic understanding of information security principles and best practices.
• Familiarity with Microsoft Windows, Microsoft 365, networking concepts, and common security technologies.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities and work independently as well as part of a team.

Preferred Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Familiarity with Microsoft Defender, Entra ID (Azure AD), or similar security platforms.
• Exposure to security frameworks such as NIST, CIS Controls, HIPAA, or ISO 27001.
• Industry certifications such as Security+ or Network+.