Information Security Analyst

Overview:

Now is the time to join us! 

Who are you?

As Information Security Analyst for the industry leading employee wellbeing and engagement platform, you will Lead the team responsible for ongoing prevention, detection and response to cyber threats across all of the company’s systems.

Reporting to the Associate Director, InfoSec, your core responsibilities will include working with our InfoSec, CyperSecOps, CyberSecEng, Fraud Prevention, and Corporate Systems teams to ensure technical security controls are deployed and performing optimally.

Key responsibilities will include implementing and maintaining effective logging tools, monitoring tools and ensuring the security of data and systems through preventing, identifying and remediating weaknesses and vulnerabilities across our technical infrastructure, applications and platforms.

This is a hands-on roll involving maintenance and management of production and corporate security tools in addition to actively working on ticket backlogs and project management.

In this role you will wear many hats, but your knowledge will be essential in the following:  

• Assist a team of CyberSecOps Engineers and Cyber Security Analysts

• Participate and lead internal and external audit efforts such as PCI, SOC2, ISO-27001, HITRUST.

• Monitor AWS and Azure security dashboards (Guard Duty, Security Hub, VPC Flow Logs, Sentinel, etc).

• Continuously assess endpoint security control coverage, escalating gaps to appropriate teams for corrective action where required.

• Create and manage security metric dashboards for use within the team and provide management reporting.

• Lead event analysis for network and system alerts in addition to anomalous platform activity, supporting internal and customer facing teams with accurate and timely log review and follow up.

• Coordinate ongoing web application scanning and PCI compliance requirements.

• Participate Red / Blue Team and CSIRT exercises, involving stakeholders across the business.

• Regularly audit public IP space and DNS records including cloud hosting resources.

• Manage cyber reputation tools to ensure findings are reviewed and resolved efficiently.

• Deliver weekly reporting on core security metrics to applicable stakeholders.

• Support business teams to interpret governance requirements into technical controls.

• Manage relationships with security vendors and consultants.

• Guide complex problems from identification to resolution, providing subject expertise to colleagues across the business.

• Investigate, recommend and install security enhancements and operating procedures to enhance security posture and optimize workflows.

• Ensure the confidentiality, integrity and availability of information being processed, stored, accessed or transmitted within systems and networks.

• Support the planning and execution of business continuity and disaster recovery tests.

• Serve as lead and escalation point for security events.

• Coordinate with stakeholders across the business for mitigations pertaining to ongoing security threats to the organization as needed.

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

What you bring to the Personify Health team:

In order to represent the best of what we have to offer you come to us with a multitude of positive attributes including:

• BS degree and/or Security specific certifications preferred, with focus on auditing related experience.

• Hungry, Humble and Smart attitude.

• Interest in SaaS Cyber Security / SecOps roles.

• Ability to prioritize and execute tasks in a high-pressure environment and take direct instruction during emergency situations.

• In depth experience with SIEM, Endpoint Protection, Data Loss Prevention, Intrusion Detection and Cloud Security management.

• Previous responsibility in management of security vendors and budgets

• Demonstrated ability to prioritize and treat technical risks.

• Previous work supporting of SOC, ISO, PCI, and HITRUST certification and compliance programs.

• Experience in vulnerability management programs and patch management.

• Able to provide technical and professional leadership, guidance, and training to others.

• Ability to build relationships and communicate effectively with peers across all business functions.

No candidate will meet every single desired qualification. If your experience looks a little different from what we’ve identified and you think you can bring value to the role, we’d love to learn more about you!

Personify Health is an equal opportunity organization and is committed to diversity, inclusion, equity, and social justice.

In compliance with all states and cities that require transparency of pay, the base compensation for this position ranges from $120,000 to $130,000. Note that salary may vary based on location, skills, and experience. This position is eligible for 5% target bonus/variable compensation as well as health, dental, vision, mental health and other benefits.

We strive to cultivate a work environment where differences are celebrated, and employees of all backgrounds are empowered to thrive. Personify Health is committed to driving Diversity, Equity, Inclusion and Belonging (DEIB) for all stakeholders: employees (at each organization level), members, clients and the communities in which we operate. Diversity is core to who we are and critical to our work in health and wellbeing.

#WeAreHiring #PersonifyHealth

Beware of Hiring Scams: Personify Health will never ask for payment or sensitive personal information such as social security numbers during the hiring process. All official communication will come from a verified company email address. If you receive suspicious requests or communications, please report them to talent@virginpulse.com. All of our legitimate openings can be found on the Personify Health Career Site.