Senior CybersecurityAnalyst, is responsible forusing variety ofCybersecurity tools and technologies todetect, analyze, test, validate, curate, provide actionable guidancetoIT System and Service Owners toenforceCybersecuritypolicies, controls, standardsfor M Health Fairview.Successful candidate would possessbroadunderstanding ofcybersecurityprinciples, frameworks, policies, risk and compliance needsfor M Health Fairview. May haveengineering expertise in one or more Cybersecuritytools andgeneral understanding of securityfunctions. Operational duties include collaborating with peer engineers/analysts, analyzing,prioritizing,solution designing and leadinggapmitigationefforts toaddress key security enforcement gaps.SeniorCybersecurityAnalysts will have deep understanding of security threats, vulnerabilities,risks or exposure and exploitability,tools and techniques to test/validate security threats andmethods tomitigatethem. Successful candidate will proactivelylead actions todetect, enumerate risk and collaborate with IT and Business teams tocome up with remediation steps andhelp minimize security risk.
Understanding of vulnerability classes (OWASP) and how they can be exploited
Understanding of various domains of security including authentication, authorization, network security, data, system device and Operating Systems, coding principles, development methodologies,web/mobile applications, use of public and private networks, devices and applicationshosted inpublic/private/hybridcloud environments
Experience analyzing risk and prioritization of vulnerability remediation using MITRE ATT&CK within the greater context of assets and the control stack
Understanding of security policies, standards, risk enumeration techniques,cybersecurity frameworks
Work with vendors, health and business partners to ensure securityremediationmilestones are being met
Lead technical and risk management groups to identify and remediate gaps including tool/technology deficiencies
Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
Defineand documentprocesses and enhance existing processes partnering withbusiness and IT teams.
Serve as security subject matter expert in assisting triage, investigation and remediation of assumed/potential/actual security incidents. Participate in Red/Blue/Purple teams as needed to help improve security posture ofM HealthFairview.
Assist in design, implement, maintain and support current and future complex information security technologies, processes and procedures. Lead the design and development of security controls that ensure the safety of information assets and protect from unauthorized access or intentional destruction.
Lead complex projects related to information security regulatory compliance and the implementation and maintenance of all cybersecurity programs, processes and technologies. Assure the implementation of appropriate security configurations or re-configurations and work with appropriate teams to execute them as required.
Foster a culture of improvement, efficiency gains and innovative thinking. Coach and mentor team members as needed. Adapt and embrace change and demonstrate flexibility in taking up and fulfilling other duties as assigned.
Bachelors degree in Computer Science, Computer Engineering, Technology Information Systems, Engineering or related technical disciplineor combination of relevant experience/education.
10+ years of cumulative experience in engineering, development and/or support of IT Systems
5+ years of experience in customization, deployment and support of Cybersecurity tools and technologies
Ability to authorand edit scripts such as PowerShell, Python and exposure to orknowledge of REST API and JSON batching and workflow automation
Ability to thrive in a sense-of-urgency environment and leverage best practices
Bachelors degree in Computer Science, Computer Engineering, Technology Information Systems, Engineering or related technical discipline
Industry specificcertifications Security+, CASP, CEH, Pentest+ or equivalents,Technical certifications such as SANS GIAC, OCSP are a plus
Together with the University of Minnesota and University of Minnesota Physicians we have created M Health Fairview. M Health Fairview is the newly expanded collaboration among the University of Minnesota, University of Minnesota Physicians, and Fairview Health Services. The healthcare system combines the best of academic and community medicine — expanding access to world-class, breakthrough care through our 10 hospitals and 60 clinics.
Fairview Health Services (fairview.org) is an award-winning, nonprofit health system providing exceptional care across the full spectrum of health care services. Fairview is one of the most comprehensive and geographically accessible systems in the state, with 10 hospitals—including an academic medical center and long-term care hospital—serving the greater Twin Cities metro area.
Its broad continuum also includes 60 primary care clinics, specialty clinics, senior living communities, retail and specialty pharmacies, pharmacy benefit management services, rehabilitation centers, counseling and home health care services, medical transportation, an integrated provider network and health insurer PreferredOne. In partnership ...with the University of Minnesota, Fairview’s 32,000 employees and 2,400 affiliated providers embrace innovation to drive a healthier future through healing, discovery and education.