Cybersecurity Threat Intelligence Engineer III

** Workforce Classification:
** Hybrid
* * Join Our Team:
Do Meaningful Work and Improve People’s Lives
** Our purpose, to improve customers’ lives by making healthcare work better, is far from ordinary. And so are our employees. Working at Premera means you have the opportunity to drive real change by transforming healthcare.

To better serve our customers, we are fostering a culture that emphasizes employee growth, collaborative innovation, and inspired leadership. We are dedicated to creating an environment where employees can excel and where top talent is attracted, retained, and thrives. As a testament to these efforts, Premera has been recognized on the  list. Newsweek honored Premera as one of , , and , Forbes ranked Premera among  for the fourth time.

Learn how Premera supports our members, customers and the communities that we serve through our Healthsource blog:  .
*** About the role of the Cybersecurity Threat Intelligence Engineer III
*** In a world that depends on data,
** The Cybersecurity Threat Intelligence Engineer III
** is a member of Premera’s Threat Intelligence team, reporting to the Manager of Threat Intelligence.  This
** Engineer
* * is responsible for the strategy and pro-active measures around protecting data, identifying potential threats as well as conducting investigations into cyber threats. By using critical thinking skills and forensic analysis you will ensure that cyber security threats are proactively stopped from accessing the Premera network.  These threats include actors from Nation State, Cyber-criminal organizations, and Insider Threats. This position is instrumental in the overall Security Awareness Program where written communication and public speaking to all employees is common.
* ** Do you want to be part of an elite team that hunts and defends Cyber threats**
* ** Our unique combination of medical records and financial data make us an attractive target for Cyber Criminals.
***** If any of the above describe your passion for preventing cyber threats, and you want to become a Cyber Security Subject Matter Expert, this might be the role for you!!
*****
* What you’ll do:

**** Use your innate hunting and analysis skills to conduct investigations into security threats.
* Protect Premera data from threat actors looking to gain access to sensitive personal and financial data in a structured team environment.
* Identify the numerous attacks launched daily to gain access to Premera data.
* Personally engineer solutions that will prevent damaging cyber threats that cost organizations hundreds of thousands of dollars annually.
* Applies advanced understanding of HITRUST engineering and controls standards.
* Exhibit a passion and tenacity about hunting and preventing cyber threats.
* Performs risk and severity assessment on cybersecurity events and incidents and then properly escalate or handle in accordance with experience and current processes.
* Act as a technical contributor with advanced knowledge and experience in one or more areas:  + PICERL (Planning, Investigation, Containment, Eradication, Lessons Learned) process  + HR related Investigative and Legal Processes  + Conflict resolution and Clear Partnership  + Analyzing gaps found in hunting exercises and minimizing the overall threat landscape  + Set the tempo, priorities, and proper workflow of the team in the day-to-day operations.
* Reviews and report out to the team IT security threat assessments for major changes to systems, applications, and networks.  This requires applying knowledge of vulnerability assessment and penetration testing tools.
* Maintains current expertise in security hacks and network penetration methods. Defines and documents defensive tactics. Defines and oversee implementation plans for security configuration changes.
* Provides advanced technical analysis and evidence capture as Level 3 technical support for security incident response.
* Defines IT policies, standards, and procedures to assure technical compliance with enterprise security policies and promote consistent use of best practices in information security. This includes regulatory standards such as SOX, HIPAA, PCI, GLBA, and various…