System Application Analyst - Security (Systems/Applications Analyst)

Department Overview:

The mission of the Information Technology Group (ITG) is to develop, implement and maintain technology-based services and solutions enable OHSU to effectively manage information to accomplish its missions.

This position as an Application Analyst, will (1) perform Security Center duties to secure all third-party applications and devices, (2) perform security vulnerability review and analysis activities to support remediation efforts, (3) assume project management responsibilities for small to medium projects or sub-projects as assigned, and (4) respond to issues related to Security Center and other duties as assigned.

Function/Duties of Position:

Identify, Investigate and Apply Security Patches to Third-Party applications

• Using security tools, identify and prioritize system vulnerabilities.
• Investigate the need for functionality on servers and eliminate any unnecessary features.
• Work with SMEs and technical teams to maintain the security and compliance of third-party applications and medical devices.
• Review vulnerability scan results and security findings to identify security risks requiring remediation.
• Assist in evaluating the potential impact of identified vulnerabilities and document findings.
• Identify and document mitigating measures if an application or device is unable to apply a patch.
• Develop test plans/documentation, conduct testing and validation as appropriate.
• Use patch management and monitoring tools to automate and streamline patching activities.
• Support remediation efforts by working with application owners and technical teams to resolve identified security vulnerabilities.

Project Management

• Assume project management responsibilities for small to medium security projects or sub-projects as assigned.

• Follow all Project Management standard processes.

• Communicate status, progress, issues and roadblocks to project sponsor and manager as appropriate.

• Ensure that all components of a project plan are completed including design, build, testing, validation, training and communication.

Problem Resolution and Security Analysis

• Respond to issues related to application security.
• Review security alerts, vulnerability reports, and security findings.
• Investigate security-related issues and assist in determining root causes.
• Collaborate with application teams, infrastructure teams, and vendors to resolve identified security concerns.
• Communicate problem progress and resolution and document activities in Service Manager as appropriate.
• Escalate significant risks, unresolved vulnerabilities, or recurring issues to senior analysts and management.

Other

• Perform other appropriate job-related duties as assigned by supervisor.

Required Qualifications:

• Master’s degree in computer science, a related field, or a clinical field and two years' work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR

• Bachelor’s degree in computer science, a related field, or a clinical field and four years' work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR

• Associate’s degree in computer science, a related field, or a clinical field and five years' work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR

• Six years work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR

• Equivalent combination of education and experience where one year of experience will be substituted for an Associate’s degree and two years of experience will be substituted for a Bachelor’s degree.

Experience

• 2+ years experience in Healthcare Information Systems, Application Support, Application Security, Security Analysis, Server Administration, or related Information Technology disciplines.
• Experience reviewing vulnerability assessment results and supporting security remediation efforts preferred.

Skills and Abilities

• Ability to work in a highly autonomous role by demonstrating self-motivation and creativity in design approach.

• Ability to function effectively in a very dynamic team environment.

• Ability to proactively pursue problem resolution independently.

• Ability to manage multiple complex tasks efficiently while successfully meeting assigned deadlines.

Additional Details:

Benefits 

• Healthcare for full-time employees covered 100% and 88% for dependents.
• $50K of term life insurance provided at no cost to the employee.
• Two separate above market pension plans to choose from.
• Vacation - up to 200 hours per year dependent on length of service.
• Sick Leave - up to 96 hours per year.
• 9 paid holidays per year.
• Substantial Tri-Met and C-Tran discounts.
• Employee Assistance Program.
• Childcare service discounts.
• Tuition reimbursement.
• Employee discounts to local and national businesses.

Why apply to OHSU?: We are Oregon's only public academic health center. In addition to caring for patients, we lead groundbreaking research. We also train the next generation of health care professionals. As Portland's largest employer, we give you opportunities to learn and advance in a system of hospitals and clinics across Oregon and Southwest Washington. All are welcome. OHSU welcomes people of all ages, ethnicities, genders, national origins, religions and sexual orientations. We are striving to build an anti-racist, multicultural institution and encourage people with diverse backgrounds to apply. To request reasonable accommodation, contact askhr@ohsu.edu