SR CYBER SECURITY ANALYST

Job Summary

The Senior Security Analyst position will provide security strategies, implement security initiatives, and respond to security incidents. This position helps design, implement, manage, and monitor technical, administrative, and physical controls to protect the confidentiality, integrity, and availability of NHG’s information assets.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Collaborate with the Security team, IT Leaders, organizational stakeholders, and the Head of IT in the development and execution of Information Security strategies.
• Protect NOW Health Group’s on-premises and Coud systems, networks, and applications against all security breaches.
• Act as a technical point of contact during security incidents.
• Contain, investigate, remediate, and document information security incidents.
• Research threat actors, tactics, techniques, procedures, malware, and other Indicators of Compromise (IoC).
• Assess, monitor, and report IT vulnerabilities.
• Prepare and analyze security reports to identify trends and drive secure behaviors throughout the organization.
• Perform forensic analysis.
• Aid in developing security standards, policies, and procedures for NOW Health Group.
• Participate in management and implementation of IT projects and help deliver them on time, on budget and according to required specifications.
• Stay up to date on latest security technologies, techniques, vendors, and make recommendations to enhance the cybersecurity posture of the company.
• Provide mentorship and training to Security and IT Teams.
• Some after-hours and on-call support will be required.

Safety Responsibility Statement

Safeguarding a culture of safety; adhering to all workplace health and safety procedures; ensuring the implementation, adherence, and enforcement of workplace health and safety requirements; promoting and enforcing safe behaviors by supervisors and employees; and ensuring injury prevention efforts are effectively implemented.

Qualifications

• Minimum 10 years of security-specific work experience.
• Hands-on experience with security technologies including SIEM, IDPs, EDR software, proxies, and firewalls.
• Knowledge of penetration testing, network security, patch management, and the techniques used to expose and correct security flaws.
• Proficiency with the MITRE ATT&CK framework and threat intelligence applications.
• The ability to identify and spotlight vulnerabilities in on-premises and remote networks, remediate problems, and prevent security breaches.
• Experience with threat-led penetration testing, attack simulation, and red/blue team exercises.
• Experience managing a ticket queue, working on multiple issues at once, while providing regular updates to customers, leadership, and teammates.
• Experience with network monitoring and management tools, including network analyzers.
• A strong focus on attention to detail, timely delivery, and satisfying user requirements.
• Develop and maintain relationships with key business areas and platform owners to provide ongoing assurance, helping to identify security risks in applications.

Education and Experience

• Bachelor's degree from four-year college or university; and at least nine years of related cybersecurity experience and/or training; or equivalent combination of education and experience.
• Must have at least one of the following certifications: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CompTIA Advanced Security Practitioner (CASP+).

Reasoning Abilities

• Soft skills such as analytical thinking, problem-solving, attention to detail, critical thinking, and data driven analysis.
• Sound decision making and trouble-shooting ability with an aptitude for solving difficult problems using creative solutions.

Physical Demands

• The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.