Security Analyst

The mission of the Center for Health Information and Analysis (CHIA) is to monitor the Massachusetts health care system and to provide reliable information and meaningful analysis for those seeking to improve health care quality, affordability, access, and outcomes.

Reporting to the Deputy Chief Information Security Officer (Deputy CISO), the Security Analyst I will support Information Security applications, work with and present Cybersecurity metrics and reports, and be a major resource in CHIA’s continuous transformation towards its secure cloud environment. This position will continuously improve upon CHIA’s Cybersecurity program and security processes, evolving over time into a security engineer role.

Ancillary tasks for this role will include participation in periodic internal IT audits and risk assessments, CSIRT (Cyber Security Incident Response Team) duties where applicable, production of procedural documentation, security product research, vendor management, and any related duties assigned by the CISO.

Specifically, the Security Analyst will do the following:

• Cloud Security Reporting:
  Work with CHIA’s various IT departments to secure network, application, and database infrastructure and tools in the cloud. Work closely with the team to continuously look for ways to harden and protect CHIA’s assets.
• Security Infrastructure Metrics:
  Mine metrics from security infrastructure (applications, databases, network appliances, servers), aggregate, and normalize to facilitate reporting on enterprise security
• Security Reporting:
  Coordinate and generate cyber security related reports, alarms, and notifications;
  Identify reporting gaps and take appropriate steps to remediate
• Monitoring:
  Administer privileged/trusted monitoring of agency computers and IT systems at the direction of the CISO or CIO
• Core Cyber Security Process Support:
  Support the execution of risk assessments, vulnerability and threat assessments, incident response, and cyber security awareness
• Threat Research:
  Perform threat research and leverage it to improve the effectiveness of our safeguards and defense-in-depth strategy. Stay current with cyber security trends, best practices, and developments on topics such as emerging threats, containment and eradication of malware, and incident response, and act as a team resource for this information
• IT Audit Support:
  Support the CISO in auditing systems, user accounts, databases, and applications for policy compliance, e.g. least privilege, appropriate security controls, timely security patching, unique user accounts.
• Security Incident Root Cause Analysis:
  Analyze malware infections and recommend improvements to anti-malware technology, tactics, or procedures where applicable
• Security Training:
  Participate in annual employee training sessions to improve Cyber Security awareness throughout the agency
• Ongoing Maintenance:
  Perform regular maintenance operations on primary Security systems/applications to keep them patched and current
• Vet software:
  
  Vet new software before it is introduced into CHIA’s production network
• Azure Cloud Support:
  Support the configuration of security components, connectivity and networks in CHIA’s cloud computing environment.

We value the talent and expertise you bring to the table. The salary range for this position is expected to be $75,826.40 - $. The final offer will be based on the candidate’s skills, experience, and qualifications, as well as applicable Commonwealth guidelines. CHIA may adjust title, responsibilities, and salary depending on the experience and expertise of the individual selected.

We foster a flexible, collaborative environment, offering a hybrid model that balances in-person and remote work. Our hybrid approach allows you to work alongside your colleagues in our vibrant Boston office at 501 Boylston Street for at least two designated days per week, with the flexibility to work remotely on others.

When you embark on a career with the Commonwealth, you are offered an outstanding suite of employee benefits that add to the overall value of your compensation package. We take pride in providing a work…