Security Analyst

The Center for Health Information and Analysis (CHIA) is focused on monitoring the Massachusetts health care system and providing reliable information for improvement. The Security Analyst I will support Information Security applications, work with Cybersecurity metrics, and contribute to the transformation towards a secure cloud environment while continuously improving CHIA’s Cybersecurity program.

What you'll do:

• Work with CHIA’s various IT departments to secure network, application, and database infrastructure and tools in the cloud
• Mine metrics from security infrastructure (applications, databases, network appliances, servers), aggregate, and normalize to facilitate reporting on enterprise security
• Coordinate and generate cyber security related reports, alarms, and notifications; Identify reporting gaps and take appropriate steps to remediate
• Administer privileged/trusted monitoring of agency computers and IT systems at the direction of the CISO or CIO
• Support the execution of risk assessments, vulnerability and threat assessments, incident response, and cyber security awareness
• Perform threat research and leverage it to improve the effectiveness of our safeguards and defense-in-depth strategy
• Support the CISO in auditing systems, user accounts, databases, and applications for policy compliance, e.g. least privilege, appropriate security controls, timely security patching, unique user accounts
• Analyze malware infections and recommend improvements to anti-malware technology, tactics, or procedures where applicable
• Participate in annual employee training sessions to improve Cyber Security awareness throughout the agency
• Perform regular maintenance operations on primary Security systems/applications to keep them patched and current
• Vet new software before it is introduced into CHIA’s production network
• Support the configuration of security components, connectivity and networks in CHIA’s cloud computing environment

What they're looking for:

• At least one (1) years of full-time or equivalent part-time professional or practical experience in the field of information technology security, or any equivalent combination of the required experience and the substitutions below
• An associate's degree in a related field may substitute for the required experience
• Strong experience in information assurance, Cybersecurity, systems analysis, IT audit, or related specialization, or commensurate higher education
• High level of proficiency in reading and writing English
• Microsoft Enterprise technologies such as Active Directory and Microsoft 365
• Microsoft Azure security, connectivity, and network components
• In-depth knowledge of network security and firewall technologies, including but not limited to, Cisco and Palo Alto
• Understanding of HIPAA compliance requirements
• Recognizes opportunities for addressing IT issues, risks, and exposures
• Maintains strong liaison and working relationships
• Works efficiently and diligently to resolve security problems and help desk tickets
• Accepts responsibility and personal accountability

Benefits:

• Hybrid Work: work from our Boston office at 501 Boylston Street for at least two designated days per week, with the flexibility to work remotely on other days.
• 75% state paid medical insurance premium
• Reasonable Dental and Vision Plans
• Flexible Spending Account and Dependent Care Assistance programs
• Low cost basic and optional life insurance
• Retirement Savings: State Employees' Pension and a Deferred Compensation 457(b) plan
• 11 paid holidays per year
• Competitive Sick, Vacation and Personal Time
• Tuition Benefit for employee and spouse at state colleges and universities