Hearst Health · 21 hours ago
Lead Security Administrator
Louisville, KY
Full-time
Hybrid
Mid, Senior Level
4+ years expHearst Health is a market leader in healthcare software development providing mobile cloud-based solutions for clinical, operational, and financial improvement. The Lead Security Administrator is responsible for ensuring infrastructure alignment with modern platform design, managing security operations, and implementing security platforms across hybrid cloud environments.
Hospital & Health Care
No H1B
U.S. Citizen Only
Responsibilities
Act as a technical leader/people, subject matter expert and point of escalation while providing technical direction to team-members and evangelize best practices and methodologies
Act in a Product Owner role for the team, aligning priorities to the strategy
Management of Professional Service engagements and other staff augmentation options
Support the company journey of moving to modern cloud operations
Stay current on security trends and integrated technologies
Conduct necessary analysis, design, and prepare technical documentation and runbooks for new toolsets and processes
Cultivate strong working relationships with scrum teams, engineers, architects, vendors, contractors, and leadership
Leverage, support, and advocate the use of configuration management tools for infrastructure in a hybrid cloud model
Align system capabilities to overall solution and business strategy
IT Service Management fulfiller including incident, problem, and change
Recommend and implement software, tools, or solutions to enhance security posture
Available outside of business hours to respond to high priority escalations
Qualification
Required
2+ years Security team lead experience
Bachelor's degree in information technology, Computer Science, or related (equivalent experience considered)
Experience managing a team of security administrators/operators
4+ years' experience in 24x7 production environments
Demonstrated experience with Splunk Core, Splunk Enterprise Security
Experience with event and incident handling
Experience working in a regulated industry such as HIPAA, PCI, SOX
Security work experience in a healthcare context dealing with HiTrust (desired)
Experience working in an Agile environment
Strong written and verbal interpersonal skills
Excellent problem solving and analytical skills with attention to detail and driving issues to resolution
Strong customer focus, ownership, bias for action and the ability to dive deep
Excellent ability to align business processes and requirements with a technical implementation focus
Support compliance program including being able to create artifacts
Write and contribute to project plans, features, and engineering / architecture level documentation
Experience designing and management large-scale distributed systems
Operations and management of platforms used within Security Operations including but not limited to Cortex, Splunk ES, and CyberArk
Root cause analysis that can be presented to technical and Executive audiences
Proficient in the detection, response, mitigation, and/or reporting of cyber threats
Proficient with NTLM and Kerberos authentication protocols, administration, and hardening
Network/Server security attack mitigation
Collaborating with cross function teams
Windows/Linux security/administration knowledge
Experience with load balancers such as NetScaler, F5, and Azure load balancers
Inventory management of all network devices
Creates and maintains documentation to support policies, procedures, and runbooks
Design systems management solutions using automation and self-repair rather than relying on alarms and human intervention
Develop appropriate metrics and monitors to ensure operational excellence for services being supported. Aligning monitoring to SLA requirements
Working with internal teams to secure assets
Knowledge of CyberArk platform or similar product
Bachelor degree in Computer Science, Cybersecurity, Engineering, Math or related (equivalent experience considered)
Preferred
Candidates with relevant certifications are preferred, including but not limited to the following:
Security analysis (eg. Security+, GSEC, GCIH, GCIA, etc)
Security management/architecture (eg. CASP+, CISSP, NCSF, etc)
Security engineering (eg. Azure SAE, GCWIN, GCUX, PCCSA/CCNA, etc)
Information security auditing (eg. CISA, CIA, GSNA, ISO, etc)
Certifications in Splunk
Certifications related to ITIL/ITSM
Company
Hearst Health
The mission of Hearst Health is to guide healthcare organizations by delivering essential intelligence and software that improve the quality, safety and efficiency of care.
1001-5000 employees
Funding
Current Stage
Late StageLeadership Team
Denielle G. deWynter
Chief Financial Officer & SVP
Company data provided by crunchbase