Apply on Employer Site

Neighborhood Health Plan of Rhode Island · 5 months ago

Senior Cyber Security Analyst (42466)

Smithfield, RI, USA

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

Neighborhood Health Plan of Rhode Island is seeking a Senior Cyber Security Analyst to maintain the security of their technical environment. The role involves evaluating existing security measures, identifying vulnerabilities, and implementing solutions to manage cyber threats while supporting various projects.

Health CareMedicalNon Profit

H1B Sponsor Likely

Responsibilities

Assist in developing, operating, and evolving Cloud Access Security solutions and capabilities

Performs system security administration on designated technology platforms, including operating systems, applications and network security devices, in accordance with the defined policies, standards and procedures of the organization, as well as with industry best practices and vendor guidelines

Performs installation and configuration management of security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems

Performs threat and vulnerability assessments, followed by appropriate remedial action, to ensure that systems are protected from known and potential threats and are free from known vulnerabilities Research, recommend, and implement streamlined automation processes

Develops and maintains documentation for security systems and procedures

Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls and host-based security systems

Provide support to one or more projects simultaneously. Delivers projects on schedule

Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization

Assists and trains junior team members in the use of security tools, the preparation of security reports and the resolution of security issues

Applies patches where appropriate and, removes or otherwise mitigates known control weaknesses, such as unnecessary services or applications or redundant user accounts, as a means of hardening systems in accordance with security policies and standards Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity

Using threat intelligence information research emerging threats and vulnerabilities to aid in the identification of incidents

Job Knowledge - Remains up-to-date in assigned area of responsibility: possesses skills and knowledge to perform job effectively; efficiently and safely; acquires, understands, and applies technical and professional information and skills; understands and adheres to policies and procedures

Supports the creation of security incident response, business continuity/disaster recovery plans, including conducting tests, publishing test results and making changes necessary to address deficiencies

Analyzes problems and alternative solutions and takes appropriate timely action to achieve desired business results. Seeks unique and novel solutions to problems and considers impact of final resolution

Perform security standards testing against computers before implementation to ensure security

Provide Key Performance Metrics to our Risk Management team to help coordinate risk tracking

Educate internal teams on information security best practices

Assist in technical audits of IT Systems and controls

Other duties as assigned

Corporate Compliance Responsibility - As an essential function, responsible for complying with Neighborhood’s Corporate Compliance Program, Standards of Business Conduct, applicable contracts, laws, rules and regulations, policies and procedures as it applies to individual job duties, the department, and the Company. This position must exercise due diligence to prevent, detect and report unlawful and/or unethical conduct by fellow co-workers, professional affiliates and/or agents

Qualification

Information Security ExperienceVulnerability Management ToolsPatch ManagementSecurity CertificationCloud Security SolutionsSIEM MonitoringThreat IntelligenceNetwork SecurityAnalytical SkillsTechnical AuditsScriptingAutomationInterpersonal SkillsStrategic Thinking

Required

Bachelor's degree in Computer Science or a related area and/or sufficient experience in IT Security to equate to the degree

Minimum 10 years' experience Information Systems

Minimum 5 years' of Information Security Experience, working with vulnerability management tools (Application/Code vulnerability scanners)

Minimum 5 years' experience working with DNS, routing, authentication, VPN, proxies, IDS/IPS, and DDOS mitigation technologies

Strong analytical and problem-solving skills to enable effective security incident and problem resolution

Strong knowledge of threats and common vulnerabilities associated with exploitation techniques

Hands on experience with Patch Management, and Encryption algorithms

Proven ability to work under stress in emergencies, with the flexibility to handle multiple high-pressure situations simultaneously

Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel

Knowledge of Microsoft Windows AD group policy management and WSUS integration

Hands on experience with SIEM monitoring, Patch Management, and Encryption algorithms

Familiar with NIST, HiTrust, and CIS Critical Security Controls

Demonstrated experience implementing or operation of security hardware or software

Demonstrated Knowledge of Azure AD and Office 365

Ability to articulate technical risk issues in business terms

Ability to work well under minimal supervision

Security Certification (CISSP, CCSP, GIAC, CISM)

Experience scripting and automating (PowerShell, python)

Demonstrated experience with strategic thinking and risk based decision making

Preferred

Knowledge of network infrastructure including routers, switches, firewalls, wireless, and associated protocols

Knowledge of SCCM, Nutanix, VMware, Linux, Web and email content filtering, Signal Sciences, Rapid 7, CrowdSrike, CyberArk

Strong understanding of TLS, HTTPS, SFTP, SSH, IPSec

Company

Neighborhood Health Plan of Rhode Island

Neighborhood Health Plan of Rhode Island offers nationally-recognized, high-quality health care for 185,000 Rhode Islanders.

Founded in 1993

Providence, Rhode Island, USA

201-500 employees

https://www.nhpri.org

H1B Sponsorship

Neighborhood Health Plan of Rhode Island has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2025 (1)

2024 (7)

2023 (1)

2022 (3)

2021 (4)

2020 (4)