IT Analyst II, Security Systems

Analyst II IT SecurityJob Summary:The IT Security Analyst II is responsible for supporting the organizations cybersecurity program through continuous monitoring incident response vulnerability management identity and access governance security assessments and administration of security technologies. This role helps protect organizational systems networks cloud services and data assets while supporting security operations compliance requirements and risk reduction Analyst II partners with infrastructure support application and business teams to investigate security events implement security controls improve security posture and promote cybersecurity awareness across the organizational systems identities networks cloud platforms and data from unauthorized access modification disclosure disruption or compliance with endpoint mobile device and cloud security standards including encryption endpoint protection vulnerability remediation and secure configuration and review identity and access management processes including provisioning deprovisioning entitlement reviews privileged access governance and periodic access certification and support the vendor risk assessment process including security reviews documentation collection risk evaluations and remediation investigate and respond to security alerts log events suspicious activity and anomalies across endpoint network cloud email and identity platforms. Provide operational reporting and coordinate remediation activities as in incident response activities including triage investigation containment remediation documentation escalation and post-incident vulnerability assessments track remediation efforts validate corrective actions and report on organizational risk maintain evaluate and improve cybersecurity technologies including SIEM EDR/XDR vulnerability management email security endpoint protection firewall identity security and cloud security and review security controls including application security access control data protection and security configuration with infrastructure network and cloud teams to design implement and support security controls across servers endpoints applications and cloud update and maintain cybersecurity policies standards procedures and technical security and participate in change recommendations for improving security operations monitoring capabilities threat detection and overall cybersecurity and lead internal phishing campaign efforts including reporting and presenting to IT and business leadership Manage and resolve security-related tickets incidents service requests and escalations through internal and vendor-managed ticketing systems. Report on SLA or other service issues as required as they relate to our strategic security business partners Participate in cybersecurity projects operational meetings security reviews assessments and cross-functional contributor for creating or gathering content for the annual security assessment Skills/Abilities:Experience reviewing SIEM alerts escalations and security events including coordinating response activities with internal and external conducting threat hunting activities using SIEM EDR/XDR threat intelligence endpoint telemetry and log analysis to identify suspicious behavior and potential knowledge of network protocols attack techniques attack surface analysis threat detection methodologies and mitigation understanding of DNS DHCP TCP/IP Active Directory Entra ID authentication protocols and enterprise networking understanding of Windows 10 Windows 11 Windows Server endpoint security management and Microsoft enterprise productivity to evaluate technologies identify security risks and recommend practical mitigation to produce clear technical documentation procedures reports security findings and recommendations for both technical and non-technical self-starter able to manage multiple priorities while maintaining a stewarding heart and team-oriented working in a fast-paced environment with multiple concurrent projects and interpersonal skills with the ability to interact effectively with technical non-technical support and business stakeholders at all oral and written communication working knowledge of LAN/WAN topologies and architecture. Multi-site WAN experience required; Meraki experience to build effective working relationships with customers co-workers leadership vendors and business stakeholders while maintaining a strong customer service Qualifications:Bachelors degree in information security Computer Science Information Systems or a related field; equivalent experience 4 years of experience in cybersecurity security operations incident response vulnerability management threat hunting or related information security supporting Microsoft cloud and security technologies including Microsoft 365 Azure Entra ID Defender Sentinel Intune Conditional Access MDM or related security investigating security events and incidents including documentation of findings remediation activities and incident response supporting enterprise security technologies and security monitoring activitiesEmbodies and serves as a role model of ArchWell Healths Values:Be compassionateStrive for excellenceEarn trustShow respectStay resilientAlways do the right thingPreferred Qualifications:Experience supporting healthcare regulated or highly compliant with HIPAA NIST Cybersecurity Framework CIS Controls HITRUST or similar security and compliance conducting proactive threat hunting activities using SIEM EDR/XDR threat intelligence and endpoint with Microsoft Defender XDR Defender for Cloud Sentinel automation advanced hunting KQL and security orchestration with SIEM EDR/XDR vulnerability management identity protection cloud security and security monitoring certifications such as Security SC-200 SC-300 AZ-500 CySA CISSP GCIH or ArchWell Health:At ArchWell Health were creating a community of caring designed to help our members stay healthy and engaged. By focusing on a strong provider-patient relationship routine wellness and staying active our members enjoy a higher level of care and better quality of life after the age of 60. Everything we do is for seniors. We believe seniors should be heard listened to and given ample time by their physicians to live well later in value-based care model is designed to prevent illnesses while keeping members healthy and happy in every aspect of their life. We deliver best-in-class primary care at comfortable accessible neighborhood centers where older adults can feel at home and become part of a vibrant wellness-focused community. Were passionate about caring for older adults and united by the belief that caring has the power to change everything for our Health is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to their race color religion age sex sexual orientation gender identity national origin disability veteran status or any other protected classification.