Security Analyst

The mission of the Center for Health Information and Analysis (CHIA) is to monitor the Massachusetts health care system and to provide reliable information and meaningful analysis for those seeking to improve health care quality affordability access and outcomes.

Reporting to the Deputy Chief Information Security Officer (Deputy CISO) the Security Analyst I will support Information Security applications work with and present Cybersecurity metrics and reports and be a major resource in CHIAs continuous transformation towards its secure cloud environment. This position will continuously improve upon CHIAs Cybersecurity program and security processes evolving over time into a security engineer role. Ancillary tasks for this role will include participation in periodic internal IT audits and risk assessments CSIRT (Cyber Security Incident Response Team) duties where applicable production of procedural documentation security product research vendor management and any related duties assigned by the CISO.

Specifically the Security Analyst will do the following:

• Cloud Security Reporting: Work with CHIAs various IT departments to secure network application and database infrastructure and tools in the cloud. Work closely with the team to continuously look for ways to harden and protect CHIAs assets.
• Security Infrastructure Metrics: Mine metrics from security infrastructure (applications databases network appliances servers) aggregate and normalize to facilitate reporting on enterprise security
• Security Reporting: Coordinate and generate cyber security related reports alarms and notifications; Identify reporting gaps and take appropriate steps to remediate
• Monitoring: Administer privileged/trusted monitoring of agency computers and IT systems at the direction of the CISO or CIO
• Core Cyber Security Process Support: Support the execution of risk assessments vulnerability and threat assessments incident response and cyber security awareness
• Threat Research: Perform threat research and leverage it to improve the effectiveness of our safeguards and defense-in-depth strategy. Stay current with cyber security trends best practices and developments on topics such as emerging threats containment and eradication of malware and incident response and act as a team resource for this information
• IT Audit Support: Support the CISO in auditing systems user accounts databases and applications for policy compliance e.g. least privilege appropriate security controls timely security patching unique user accounts.
• Security Incident Root Cause Analysis: Analyze malware infections and recommend improvements to anti-malware technology tactics or procedures where applicable
• Security Training: Participate in annual employee training sessions to improve Cyber Security awareness throughout the agency
• Ongoing Maintenance: Perform regular maintenance operations on primary Security systems/applications to keep them patched and current
• Vet software:Vet new software before it is introduced into CHIAs production network
• Azure Cloud Support: Support the configuration of security components connectivity and networks in CHIAs cloud computing environment.

Total Compensation:

We value the talent and expertise you bring to the table. The salary range for this position is expected to be $75826.40 - $112960.38. The final offer will be based on the candidates skills experience and qualifications as well as applicable Commonwealth guidelines. CHIA may adjust title responsibilities and salary depending on the experience and expertise of the individual selected.

Hybrid Work:
We foster a flexible collaborative environment offering a hybrid model that balances in-person and remote work. Our hybrid approach allows you to work alongside your colleagues in our vibrant Boston office at 501 Boylston Street for at least two designated days per week with the flexibility to work remotely on others.

Comprehensive Benefits:

When you embark on a career with the Commonwealth you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you your loved ones and your future.

Want the specificsExplore our Employee Benefits and Rewards!

Together lets embark on a journey of meaningful impact on healthcare. We invite you to join CHIA where your expertise will shape the future of healthcare in were eager to take a chance on you - to welcome a dedicated professional who shares our passion for making a difference. Join us in this collaborative endeavor where well forge new paths innovate and lead the way toward a healthier Commonwealth.

Minimum Entrance Requirements:

Security Analyst I:

Applicants must have (A) at least one (1) years of full-time or equivalent part-time professional or practical experience in the field of information technology security or (B) any equivalent combination of the required experience and the substitutions below.

Substitutions:

An associates degree in a related field may substitute for the required experience.

Security Analyst II:

Applicants must have (A) at least two (2) years of full-time or equivalent part-time professional or practical experience in the field of information technology security or (B) any equivalent combination of the required experience and the substitutions below.

Substitutions:

• An Associates degree in a related field may substitute for one (1) year of the required experience.
• A Bachelors degree or higher in a related field may substitute for the .

Preferred Qualifications:

• Strong experience in information assurance Cybersecurity systems analysis IT audit or related specialization or commensurate higher education
• High level of proficiency in reading and writing English
• Microsoft Enterprise technologies such as Active Directory and Microsoft 365
• Microsoft Azure security connectivity and network components
• In-depth knowledge of network security and firewall technologies including but not limited to Cisco and Palo Alto
• Understanding of HIPAA compliance requirements Preferred Character Traits:
• Recognizes opportunities for addressing IT issues risks and exposures
• Maintains strong liaison and working relationships
• Works efficiently and diligently to resolve security problems and help desk tickets
• Accepts responsibility and personal accountability
• Possesses strong interpersonal skills
• Writes clear and concise documentation and procedures Total Compensation:

As an employee of the Commonwealth of Massachusetts you are offered a great career opportunity influencing a wide spectrum of services to the diverse populations we serve - but its more than a paycheck. The States total compensation package features an outstanding set of employee benefits which you should consider regarding your overall compensation including:

• 75% state paid medical insurance premium
• Reasonable Dental and Vision Plans
• Flexible Spending Account and Dependent Care Assistance programs
• Low cost basic and optional life insurance
• Retirement Savings: State Employees Pension and a Deferred Compensation 457(b) plan
• 11 paid holidays per year and competitive Sick Vacation and Personal Time
• Tuition Benefit for employee and spouse at state colleges and universities

This position is designated as a confidential non-union and non-managerial Security Job Family Level I; Security Analyst I position with the Data Operations and Technology Unit.

Salary Full Range:

Security Analyst I: ITTA - Level 1 $75826.40 - $112960.38

Security Analyst II: ITTA Level 2 $84407.18 - $125924.24

CHIA offers a flexible collaborative hybrid work model that balances in-person and remote work. Employees work from our Boston office at 501 Boylston Street at least two designated days per week with the flexibility to work remotely on other days.

To apply visit.

An Equal Opportunity / Affirmative Action Employer. Females minorities veterans and persons with disabilities are strongly encouraged to apply.

The Commonwealth is an Equal Opportunity Employer and does not discriminate on the basis of race religion color sex gender identity or expression sexual orientation age disability national origin veteran status or any other basis covered by appropriate law. Research suggests that qualified women Black Indigenous and Persons of Color (BIPOC) may self-select out of opportunities if they dont meet 100% of the job requirements. We encourage individuals who believe they have the skills necessary to thrive to apply for this role.

Information submitted by applicants is collected through the JazzHR Platform your submission of application materials constitutes your express consent for this information to be provided to JazzHR for processing. Please do not include any personally identifiable information with your application materials other than that specifically requested by CHIA. CHIA requests basic information such as name address telephone number and email address. You may also self-identify with your race/ethnicity gender disability and/or veteran status. However you should not provide more detailed personal information such as your date of birth or Social Security Number with your application materials.