System Application Analyst - Security; Systems​/Applications Analyst

Department Overview

The mission of the Information Technology Group (ITG) is to develop, implement and maintain technology-based services and solutions enable OHSU to effectively manage information to accomplish its missions.

This position as an Application Analyst, will (1) perform Security Center duties to secure all third-party applications and devices, (2) perform security vulnerability review and analysis activities to support remediation efforts, (3) assume project management responsibilities for small to medium projects or sub-projects as assigned, and (4) respond to issues related to Security Center and other duties as assigned.

Identify, Investigate and Apply Security Patches to Third-Party applications

• Using security tools, identify and prioritize system vulnerabilities.
• Investigate the need for functionality on servers and eliminate any unnecessary features.
• Work with SMEs and technical teams to maintain the security and compliance of third-party applications and medical devices.
• Review vulnerability scan results and security findings to identify security risks requiring remediation.
• Assist in evaluating the potential impact of identified vulnerabilities and document findings.
• Identify and document mitigating measures if an application or device is unable to apply a patch.
• Develop test plans/documentation, conduct testing and validation as appropriate.
• Use patch management and monitoring tools to automate and streamline patching activities.
• Support remediation efforts by working with application owners and technical teams to resolve identified security vulnerabilities.

Project Management

• Assume project management responsibilities for small to medium security projects or sub-projects as assigned.
• Follow all Project Management standard processes.
• Communicate status, progress, issues and roadblocks to project sponsor and manager as appropriate.
• Ensure that all components of a project plan are completed including design, build, testing, validation, training and communication.

Problem Resolution and Security Analysis

• Respond to issues related to application security.
• Review security alerts, vulnerability reports, and security findings.
• Investigate security-related issues and assist in determining root causes.
• Collaborate with application teams, infrastructure teams, and vendors to resolve identified security concerns.
• Communicate problem progress and resolution and document activities in Service Manager as appropriate.
• Escalate significant risks, unresolved vulnerabilities, or recurring issues to senior analysts and management.

Other

• Perform other appropriate job-related duties as assigned by supervisor.

• Master's degree in computer science, a related field, or a clinical field and two years' work related experience in the information technology field or a combination of clinical or operational healthcare environments;
  OR
• Bachelor's degree in computer science, a related field, or a clinical field and four years' work related experience in the information technology field or a combination of clinical or operational healthcare environments;
  OR
• Associate's degree in computer science, a related field, or a clinical field and five years' work related experience in the information technology field or a combination of clinical or operational healthcare environments;
  OR
• Six years work related experience in the information technology field or a combination of clinical or operational healthcare environments;
  OR
• Equivalent combination of education and experience where one year of experience will be substituted for an Associate's degree and two years of experience will be substituted for a Bachelor's degree.

Experience

• 2+ years experience in Healthcare Information…