Security Analyst

Security Analyst IThe mission of the Center for Health Information and Analysis (CHIA) is to monitor the Massachusetts health care system and to provide reliable information and meaningful analysis for those seeking to improve health care quality, affordability, access, and outcomes.Reporting to the Deputy Chief Information Security Officer (Deputy CISO), the Security Analyst I will support Information Security applications, work with and present Cybersecurity metrics and reports, and be a major resource in CHIA's continuous transformation towards its secure cloud environment. This position will continuously improve upon CHIA's Cybersecurity program and security processes, evolving over time into a security engineer role. Ancillary tasks for this role will include participation in periodic internal IT audits and risk assessments, CSIRT (Cyber Security Incident Response Team) duties where applicable, production of procedural documentation, security product research, vendor management, and any related duties assigned by the CISO.Specifically, the Security Analyst will do the following:Cloud Security Reporting: Work with CHIA's various IT departments to secure network, application, and database infrastructure and tools in the cloud. Work closely with the team to continuously look for ways to harden and protect CHIA's assets.Security Infrastructure Metrics: Mine metrics from security infrastructure (applications, databases, network appliances, servers), aggregate, and normalize to facilitate reporting on enterprise securitySecurity Reporting: Coordinate and generate cyber security related reports, alarms, and notifications; Identify reporting gaps and take appropriate steps to remediateMonitoring: Administer privileged/trusted monitoring of agency computers and IT systems at the direction of the CISO or CIOCore Cyber Security Process Support: Support the execution of risk assessments, vulnerability and threat assessments, incident response, and cyber security awarenessThreat Research: Perform threat research and leverage it to improve the effectiveness of our safeguards and defense-in-depth strategy. Stay current with cyber security trends, best practices, and developments on topics such as emerging threats, containment and eradication of malware, and incident response, and act as a team resource for this informationIT Audit Support: Support the CISO in auditing systems, user accounts, databases, and applications for policy compliance, e.g. least privilege, appropriate security controls, timely security patching, unique user accounts.Security Incident Root Cause Analysis: Analyze malware infections and recommend improvements to anti-malware technology, tactics, or procedures where applicableSecurity Training: Participate in annual employee training sessions to improve Cyber Security awareness throughout the agencyOngoing Maintenance: Perform regular maintenance operations on primary Security systems/applications to keep them patched and currentVet software: Vet new software before it is introduced into CHIA's production networkAzure Cloud Support: Support the configuration of security components, connectivity and networks in CHIA's cloud computing environment.Total Compensation:We value the talent and expertise you bring to the table. The salary range for this position is expected to be $75,826.40 - $112,960.38. The final offer will be based on the candidate's skills, experience, and qualifications, as well as applicable Commonwealth guidelines. CHIA may adjust title, responsibilities, and salary depending on the experience and expertise of the individual selected. Hybrid Work: We foster a flexible, collaborative environment, offering a hybrid model that balances in-person and remote work. Our hybrid approach allows you to work alongside your colleagues in our vibrant Boston office at 501 Boylston Street for at least two designated days per week, with the flexibility to work remotely on others.Comprehensive Benefits:When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work experience that supports you, your loved ones, and your future.Want the specifics? Explore our Employee Benefits and Rewards!Together, let's embark on a journey of meaningful impact on healthcare. We invite you to join CHIA, where your expertise will shape the future of healthcare in Massachusetts. Likewise, we're eager to take a chance on you - to welcome a dedicated professional who shares our passion for making a difference. Join us in this collaborative endeavor, where we'll forge new paths, innovate, and lead the way toward a healthier Commonwealth.Minimum Entrance Requirements:Security Analyst I:Applicants must have (A) at least one (1) years of full-time or equivalent part-time professional or practical experience in the field of information technology security, or (B) any equivalent combination of the required experience and the substitutions below.Substitutions:An associate's degree in a related field may substitute for the required experience.Security Analyst II:Applicants must have (A) at least two (2) years of full-time or equivalent part-time professional or practical experience in the field of information technology security, or (B) any equivalent combination of the required experience and the substitutions below.Substitutions:An Associate's degree in a related field may substitute for one (1) year of the required experience.A Bachelor's degree or higher in a related field may substitute for the required.Preferred Qualifications:Strong experience in information assurance, Cybersecurity, systems analysis, IT audit, or related specialization, or commensurate higher educationHigh level of proficiency in reading and writing EnglishMicrosoft Enterprise technologies such as Active Directory and Microsoft 365Microsoft Azure security, connectivity, and network componentsIn-depth knowledge of network security and firewall technologies, including but not limited to, Cisco and Palo AltoUnderstanding of HIPAA compliance requirements Preferred Character Traits:Recognizes opportunities for addressing IT issues, risks, and exposuresMaintains strong liaison and working relationshipsWorks efficiently and diligently to resolve security problems and help desk ticketsAccepts responsibility and personal accountabilityPossesses strong interpersonal skillsWrites clear and concise documentation and procedures Total Compensation:As an employee of the Commonwealth of Massachusetts, you are offered a great career opportunity influencing a wide spectrum of services to the diverse populations we serve - but it's more than a paycheck. The State's total compensation package features an outstanding set of employee benefits which you should consider regarding your overall compensation, including:75% state paid medical insurance premiumReasonable Dental and Vision PlansFlexible Spending Account and Dependent Care Assistance programsLow cost basic and optional life insuranceRetirement Savings: State Employees' Pension and a Deferred Compensation 457(b) plan11 paid holidays per year and competitive Sick, Vacation and Personal TimeTuition Benefit for employee and spouse at state colleges and universitiesThis position is designated as a confidential non-union and non-managerial Security Job Family Level I; Security Analyst I position with the Data Operations and Technology Unit.Salary Full Range:Security Analyst I: ITTA - Level 1, $75,826.40 - $112,960.38Security Analyst II: ITTA – Level 2, $84,407.18 - $125,924.24CHIA offers a flexible, collaborative hybrid work model that balances in-person and remote work. Employees work from our Boston office at 501 Boylston Street at least two designated days per week, with the flexibility to work remotely on other days.An Equal Opportunity / Affirmative Action Employer. Females, minorities, veterans, and persons with disabilities are strongly encouraged to apply.The Commonwealth is an Equal Opportunity Employer and does not discriminate on the basis of race, religion, color, sex, gender identity or expression, sexual orientation, age, disability, national origin, veteran status, or any other basis covered by appropriate law. Research suggests that qualified women, Black, Indigenous, and Persons of Color (BIPOC) may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage individuals who believe they have the skills necessary to thrive to apply for this role.