[Hiring] Cyber Security Specialist Lead @Franciscan Alliance, Inc.

Role Description

The Cyber Security Specialist Lead investigates and analyzes all response activities related to cyber incidents within the network environment or enclave. Responsibilities include:

• Collecting data from various Computer Network Defense (CND) tools, including intrusion detection system alerts, firewall and network traffic logs, and host system logs.
• Providing operations for persistent monitoring of all designated networks, enclaves, and systems.
• Interpreting, analyzing, and reporting all events and anomalies in accordance with computer network directives.
• Acting as the highest level of escalation point.
• Distributing directives, vulnerability, and threat advisories to identified consumers.

Qualifications

• Required: Associate's Degree
• Preferred: Bachelor's Degree
• Preferred: Certificate
• 8 years in Information Technology or Information Security Department
• Required: 5 years in the Healthcare industry; experience in security operations activities aligning with Essential Job Functions

Requirements

• Work with Security Architects to develop roadmaps and implementation plans for upgrading, enhancing, or replacing security technologies.
• Demonstrate advanced proficiency in writing and optimizing complex SPL queries to identify and investigate suspicious activity.
• Create, test, tune, and maintain high-fidelity detections; reduce false positives; utilize risk-based alerting.
• Stay abreast of current artificial intelligence capabilities of the SIEM and other deployed security tools.
• Lead SOC efforts during investigation of high-severity security incidents.
• Develop, maintain, and safely execute SOAR playbooks; automate enrichment and response tasks.
• Understand security data sources, field extractions, data models, and the common information model (CIM).
• Serve as a technical escalation point, coach analysts, and review investigations.
• Build Splunk dashboards and reports to measure various performance metrics.
• Build detections for anomalous user and entity behavior.
• Work with internal resources and external 3rd parties to design and conduct penetration tests.
• Create and review cyber security policies, procedures, and standards related to Security Operations Center, Vulnerability Management, and Incident Response processes.

Benefits

Franciscan provides eligible employees with comprehensive benefit offerings. Find an overview on the benefit section of our career site, jobs.franciscanhealth.org.