Enterprise Information Security Incident Response Analyst I (trinityhealth)

trinityhealth    Livonia, 道路癌    2024-08-28

Job posting number: #143487 (Ref:00534621)

Job Description

Employment Type:

Full time

Shift:

Description:

SUMMARY

Provides support and participates in generally routine incident response activities across Trinity Health and its Ministry organizations. Performs  technical analysis to identify security incidents, threats and intrusions, and rapidly determines course of action and response while working in conjunction with departmental management (e.g., infrastructure and application managers), Trinity Information Services (TIS) leadership, and Information Security subject matter experts.. Investigates and resolves network security issues and mitigates threats and vulnerabilities across the organization. Responsible for incident response, threat hunting, and data analysis to protect and maintain the overall security of the enterprise.

ESSENTIAL FUNCTIONS

  • Knows, understands, incorporates, and demonstrates the mission, vision and core values of Trinity Health and the Ministry Organization in leadership behaviors, practices and decisions.
  • Assists in protecting enterprise systems and information by promptly responding to security threats and incidents.
  • Proactively searches for threats and enacts identification, containment, and eradication measures while supporting recovery efforts.
  • Analyzes cyber security incidents to solve issues and improve incident handling procedures.
  • Escalates incident detection operations and assists with
  • real-time, continuous (24x7) security event monitoring, response, and reporting.
  • Assists in coordinating with appropriate departments during a security incident – management, legal, security, operations, and others.
  • View Orignal JOB on: italents.net
  • Creates thorough reports and documentation of all incidents and procedures, presenting findings to team and senior level Analysts.
  • Assesses cyber threat intelligence, open-source intelligence, and partner reporting.
  • Self-development through self-study to increase knowledge of understanding, designing, and implementing network security solutions using best practice approach.
    Performs other duties as assigned.
  • Maintains a working knowledge of applicable Federal, State and local laws/regulations; the Trinity Health Integrity and Compliance Program and Code of Conduct; as well as other policies and procedures in order to ensure adherence in a manner that reflects honest, ethical and professional behavior.

MINIMUM QUALIFICATIONS

  • Associates Degree OR one (1) to two (2) years of Information Security experience; or an equivalent combination of experience and education. Experience in infrastructure environments performing network security investigations preferred.
  • Experience with enterprise endpoint detect and response solutions (EDR).
  • Understanding of computer intrusion activities, incident response techniques, tools, and procedures.
  • Knowledge of industry standard tools and concepts such as CrowdStrike Falcon (EDR), QRadar (SIEM), Exabeam (UEBA), ELK, forensics, pcap, sandboxing analysis, Wireshark, SOAR, M365, Azure, system administration, firewalls.
  • Knowledge of operating system internals, OS security mitigations and understanding of Security challenges in Windows, Linux, Mac, Android and iOS platforms
  • Understanding of logging and audit capabilities.
  • Must be available for on-call rotations to support 24x7x365 service availability.
  • Must be able to set and organize own work priorities and adapt to them as they change frequently. Must be team oriented, supportive, and committed to excellence and possess high level of initiative and self-motivation with demonstrated work ethic.
  • Must possess a personal presence that is characterized by a sense of honesty, integrity, and caring with the ability to inspire and motivate others to promote the philosophy, mission, vision, goals, and values of Trinity Health.

PHYSICAL AND MENTAL REQUIREMENTS AND WORKING CONDITIONS

  • This position operates in a typical office environment. The area is well lit, temperature-controlled and free from hazards.
  • Incumbent communicates frequently, in person and over the telephone, with people in several different locations on technical issues.
  • Manual dexterity is needed to operate a keyboard. Hearing is needed for extensive telephone and in person communications.
  • The environment in which the incumbent will work requires the ability to concentrate, meet deadlines, work on several projects at the same period and adapt to interruptions.
  • The incumbent must be capable of traveling while completing project assignments.
  • Must be available for on-call rotations to support 24x7x365 service availability.
  • Must be able to travel to the various Trinity Health sites (up to 10%) as needed (may or may not apply).

The above statements are intended to describe the general nature and level of work being performed by persons assigned to this classification.  They are not to be construed as an exhaustive list of duties so assigned.

Our Commitment to Diversity and Inclusion
 

Trinity Health is one of the largest not-for-profit, Catholic healthcare systems in the nation. Built on the foundation of our Mission and Core Values, we integrate diversity, equity, and inclusion in all that we do. Our colleagues have different lived experiences, customs, abilities, and talents. Together, we become our best selves. A diverse and inclusive workforce provides the most accessible and equitable care for those we serve. Trinity Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other status protected by law.



Employer Info

Job posting number:#143487 (Ref:00534621)
Application Deadline:2024-09-27
Employer Location:trinityhealth
,
More jobs from this employer

Jobs Viewed Recently

顶部