Careington is a solutions-oriented company. An established leader, we have been a trailblazer in the field of discount health care since 1979. Over the years, our mission has remained the same - to create discount health programs that are marketable to the employer, profitable to the provider and economical for the member. In response to a growing demand for our products and services in recent years, our growth means that we continuously strive to recruit innovators to join our fast-paced, forward-thinking team. We are looking to add an IT Cyber Security Analyst that has 3 to 6+ years of experience. This position is a Hybrid working role. You must live within the Dallas, TX surrounding metroplex. Job Purpose The information cyber security analyst assists in ensuring that the risk to the organization's information posed by a variety of threats is minimized. Additionally, will beresponsible for ensuring any threats or incidents are dealt with promptly and effectively. The information security analyst plays an integral role in carrying out the organization's security strategy, architecture, and practices. The information security analyst will be required to effectively execute security processes enabled by security technologies and services. The information security analyst is expected to work with available security technologies to proactively remediate and prevent threats to the business, systems, and networks. Duties and Responsibilities
- Monitor the network using technologies and services for security issues, including the use of SIEM, EDR, NDR and DLP technologies.
- Respond to and review email security incidents and reports.
- Investigate security breaches and other cybersecurity incidents.
- Install security measures and operate software to protect systems and information infrastructure.
- Document security incidents and assess the damage they cause.
- Work with the security team to perform tests and uncover network vulnerabilities.
- Fix detected vulnerabilities to maintain a high-security standard.
- Stay current on IT security trends and news.
- Research security enhancements and make recommendations to management.
- Ensure systems are up to date and assist in patching as necessary.
- Perform initial triage of security alerts.
- Monitor reports and dashboards.
- Participate in regular audits, including procuring artifacts as necessary.
- Create incidents for non-alerted related findings, including user reported or findings from reports and dashboards.
- Work on time sensitive compliance requirements, including performing reviews, user training, and submitting required documents for management review or third-party attestation.
- Assist in the evaluation of new products and services as necessary.
- Work with the security team on remediation and enhancement projects.
- Participate in an on-call rotation.
Education & Experience
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field is preferred
- 3 to 6+ years of experience in computer systems with some specialization in computer security.
- Direct, hands-on experience managing security infrastructure.
- Demonstrated problem-solving and analytical skills.
- Proficient, or able to gain proficiency with, a broad array of security software applications and tools.
- Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
- Experience with IT regulatory compliance requirements associated with any of the following HIPAA, HITRUST, SOC 1/2, SOX, PCI
- Preferred Certification: CISSP, Security+
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)