IT Security Analyst

IT Security Analyst

Role Overview

Our people make all the difference in our success. The IT Security Analyst is responsible for ensuring technical controls meet information security policy requirements; security policy education, training, and awareness activities; monitoring compliance with DaVita’s information security policies and applicable laws; and coordinating investigation and reporting of security incidents.

In conjunction with DaVita Core IT Services (ITS), the analyst will monitor, assess, and fine-tune applicable IT security procedures, perform periodic systems, network, and application vulnerability assessments, and create actionable changes or recommendations based on risk assessment reviews or audit findings. Analysts will also be responsible for responding to cybersecurity incidents and events and work to contain, remediate, and mitigate the incident.

Key Responsibilities

• Issue Monitoring & Response: Monitor and respond to information security issues related to the systems and workflow to ensure the internal security controls for the Village are appropriate and operating as intended.

• Technical Control Management: Monitor, manage, and administer IT Security specific technical control solutions (e.g., Content filtering, IDS/IPS, Firewall, End point protection, etc.), as well as IT Security specific tools to assess vulnerabilities and incidents (i.e., Enterprise SIEM, forensics tools, vulnerability scanning tools, etc.).

• Policy Enforcement: Enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports and investigates possible security exceptions, updates, and maintains and documents security controls.

• Incident Coordination: Coordinate response to information security incidents.

• Vulnerability Collaboration: Collaborate with IT management, legal, compliance, and other applicable teams to manage vulnerability exposures.

• Development & Implementation: Assists in the development and implementation of security policies and procedures (e.g., user log-on and authentication rules, security breach escalation procedures, security auditing procedures, and use of firewalls and encryption routines).

• Security Awareness: Create, manage, and maintain user security awareness.

• Research & Evaluation: Conduct security research in keeping abreast of latest security issues. Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness.

Qualifications and Requirements

• Experience: 5 years of experience in an IT role with 3 years of IT Security experience.

• Platform Proficiency: Experience with Anti-malware, EDR/XDR, and similar platforms.

• Investigations: Experience with threat hunting and cyber investigations.

• Monitoring: Experience with endpoint and network security monitoring.

• Remediation: Experience in containing and remediating cybersecurity incidents.

• OS Skills: Solid skills with Windows and Linux.

• Work Style: Able to work both on a team and independently.

• Threat Knowledge: Knowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc.

• Networking: Basic understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc.

• Communication: Demonstrated ability to explain complex ideas and concepts both verbally and in writing to technical and nontechnical audiences.

Preferred Qualifications

• Preferable experience with Cloud Security.

• Preferable experience with Microsoft 365 security.

• Direct experience using scripting languages to automate tasks and manipulate data.

• Experience in Healthcare.