Engineer III - Security Analyst

Overview

What you can expect!

Find joy in serving others with IEHP! We welcome you to join us in “healing and inspiring the human spirit” and to pivot from a “job” opportunity to an
authentic experience!

Reporting to the Manager, Information Security Operations, the Engineer III – Security Analyst services as a senior cybersecurity practitioner and consultant, advancing the organization’s defensive posture across on-premises and cloud environments. This position maintains and improves security policies, standards, procedures, and response playbooks; produces clear incident documentation, root-cause analyses, and after-action review; and collaborates with business stakeholders to align security controls with organizational requirements.

The Engineer III - Security Analyst mentors team members, evaluates emerging technologies, and champions continues improvement to mature security operations and ensure best practices. This position provides guidance to business units and technology stakeholders during the deployment of critical business and technology initiatives utilizing deep understanding of global threat actors and their tactics, techniques, and procedures employed during cyberattacks. This position supports various Information Technology Security functional areas related to one or more of the following:
Application Security, Security Operations and Vulnerability.

Commitment to Quality:
The IEHP Team is committed to incorporate IEHP’s Quality Program goals including, but not limited to, HEDIS, CAHPS, and NCQA Accreditation.

Perks

IEHP is not only committed to healing and inspiring the human spirit of our Members, but we also aim to match our team members with the same energy by providing prime benefits and more.

• Competitive salary
• State of the art fitness center on-site
• Medical Insurance with Dental and Vision
• Life, short-term, and long-term disability options
• Career advancement opportunities and professional development
• Wellness programs that promote a healthy work-life balance
• Flexible Spending Account – Health Care/Childcare
• CalPERS retirement
• 457(b) option with a contribution match
• Paid life insurance for employees
• Pet care insurance

• Monitor firewalls, network and host intrusion prevention/detection systems, virtual private networks, threat intelligence platforms, endpoint protection, security training platforms, email security, forensic tools, public/private/hybrid cloud infrastructure, identity and access management systems, and physical security systems.
• Monitor security operations center tools and dashboards.
• Perform threat hunting activities using security operations center tools across the environment using internal or external threat intelligence sources.
• Architect cybersecurity solutions for on-premises and cloud computing environments.
• Participate in and/or leads cybersecurity engineering projects.
• Assist with risk analysis activities.
• Assist with designing and implementing controls to mitigate risk.
• Identify attack surface reduction opportunities through vulnerability data analysis and/or identify opportunities for process improvements and automation.
• Perform any other duties as required to ensure Health Plan operations and department business needs are successful.

• Monitor security systems and provide early response to potential threats.
• Manage security incident response; serve as escalation point for conducting investigations into security incidents involving advanced and sophisticated threat actors and TTPs.
• Design, test, and implement response playbooks, orchestration workflows and automations.
• Research, recommend and test new security technologies and platforms
• Analyze technologies and establish highly effective processes and…