[Hiring] Cyber Security Specialist Lead @Franciscan Health

Role Description

The Cyber Security Specialist Lead investigates and analyzes all response activities related to cyber incidents within the network environment or enclave. Responsibilities include:

• Collecting data from various Computer Network Defense (CND) tools, including intrusion detection system alerts, firewall and network traffic logs, and host system logs.
• Providing operations for persistent monitoring of all designated networks, enclaves, and systems.
• Interpreting, analyzing, and reporting all events and anomalies in accordance with computer network directives.
• Acting as the highest level of escalation point.
• Distributing directives, vulnerability, and threat advisories to identified consumers.

Qualifications

• Required: Associate's Degree
• Preferred: Bachelor's Degree
• Preferred: Certificate
• 8 years in Information Technology or Information Security Department
• Required: 5 years in the Healthcare industry; experience in security operations activities aligning with Essential Job Functions

Requirements

• SPLUNK CLOUD / ON PREMISE EXPERIENCE PREFERRED.
• Work with Security Architects to develop roadmaps and implementation plans for upgrading, enhancing, or replacing security technologies.
• Demonstrate advanced proficiency in writing and optimizing complex SPL queries.
• Create, test, tune, and maintain high-fidelity detections.
• Stay abreast of current artificial intelligence capabilities of the SIEM and other deployed security tools.
• Lead SOC efforts during investigation of high-severity security incidents.
• Develop, maintain, and safely execute SOAR playbooks.
• Understand security data sources, field extractions, data models, and the common information model (CIM).
• Serve as a technical escalation point, coach analysts, and review investigations.
• Build Splunk dashboards and reports to measure various metrics.
• Build detections for anomalous user and entity behavior.
• Work with internal resources and external 3rd parties to design and conduct penetration tests.
• Create and review cyber security policies, procedures, and standards.

Benefits

• Comprehensive benefit offerings for eligible employees.