Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate across the organization to ensure that business solutions adhere to security, privacy, and regulatory standards.

• Identify and evaluate emerging information security trends, aligning them with current architectures.

• Configure security systems and continuously monitor centralized information management platforms.

• Investigate and respond to security incidents effectively.

• Manage vulnerabilities and oversee enterprise firewalls.

• Administer identity management and global security management systems.

• Support frameworks for security-based controls.

• Analyze security logs and events utilizing SIEM technology.

• Conduct vulnerability assessments and penetration testing.

• Develop and maintain scripts, routines, and software for assessing vulnerability threats.

• Participate in the security incident response team, communicating status and outcomes to management.

• Analyze the scope, impact, and root causes of incidents; coordinate containment and recovery efforts.

• Collect and analyze forensic evidence, document findings, and create incident reports and recommendations.

• Maintain enterprise security subsystems and controls.

• Provide mentorship and guidance to junior staff members.

• Design, strategize, and manage Active Directory/Group Policy and Microsoft Entra ID, including lifecycle management, privileged access, and policy enforcement.

• Design, oversee, and manage customer identity and access management systems.

• Integrate IAM controls with security monitoring, vulnerability management, and change management processes.

• Administer and secure enterprise firewalls, including rule sets, changes, configurations, and patching.

• Implement network security best practices and integrate firewall telemetry with SIEM.

• Review architectures, identify design vulnerabilities, and recommend security enhancements.

• Assess the security implications of system changes and ensure secure configurations.

• Conduct and review risk assessments, including those involving third-party and vendor security.

• Contribute to the development of policies and procedures in line with security frameworks.

• Maintain the enterprise security awareness training program and monitor the effectiveness of controls.

• Collaborate with Cybersecurity leadership and Infrastructure/Operations teams as a subject-matter expert in security.

• Lead the design, strategy, and administration of Active Directory/Group Policy and Microsoft Entra ID for the Lead role.

• Perform other related duties as assigned.

⛳️ Requirements

• Bachelor's degree in Information or Cyber Security, Telecommunications, Engineering, Computer Science, Management Information Systems, or a related field; equivalent military or work experience may be considered in place of formal education.

• For senior roles: at least 5 years in information security, 5 years in IT, and 3 years supporting identity environments.

• For lead roles: at least 8 years in information security, 10 years in IT, and 7 years supporting identity environments.

• CISSP or an equivalent certification in good standing; must obtain certification in progress within 1 year of hire.

• Strong foundational knowledge of networking and security best practices.

• Proficient working knowledge of COBIT, NIST, or ISO frameworks.

• Experience in project management.

• Familiarity with SIEM operations, vulnerability management, MFA/SSO, Active Directory/Group Policy, and Microsoft Entra ID (Azure AD).

• Experience in firewall administration and network security tools.

• Advanced certifications (e.g., CCIE, CCNP, CCSP, CISM, CRISC, CEH, or SANS) are preferred.

• Experience in regulated environments and industry audits is preferred.

• Understanding of HIPAA/HITECH environments is preferred.

• Experience with Blue Cross Blue Shield or other health and/or life insurance companies is preferred.

• Familiarity with Department of Insurance audits is preferred.

• Knowledge of the insurance industry regulatory landscape is preferred.

• Experience with Microsoft Windows platforms and major cloud platforms is preferred.

• Experience with Azure and AWS, including PaaS, SaaS, and IaaS, is preferred.

• Knowledge of firewalls, VPN, IPS, security system construction, endpoint protection, mobile device management, web proxy, and traffic monitoring is preferred.

• Occasional evening and weekend work; travel is less than 5%.

🏝️ Benefits

• Outstanding and affordable benefits package.

• Paid time off provided from the date of hire.

• 11 paid holidays annually.

• 401(k) plan with up to 6% matching; fully vested from day one.

• Remote work opportunities with company-provided equipment.

• Opportunities for career advancement.

• Tuition reimbursement available.

• Employee Assistance Program.

• Inclusion Council and Employee Resource Groups.

• Recharge Days and Volunteer Time Off.

• Annual incentive plan based on company and individual performance.

• Opportunities for personal and professional development.

• Advancement opportunities available.