System Application Analyst – Security

Stellenbeschreibung:

Perform Security Center duties to secure all third-party applications and devices
Perform security vulnerability review and analysis activities to support remediation efforts
Assume project management responsibilities for small to medium projects or sub-projects as assigned
Respond to issues related to Security Center and other duties as assigned
Identify, investigate and apply security patches to third-party applications
Use security tools to identify and prioritize system vulnerabilities
Investigate server functionality needs and eliminate unnecessary features
Work with SMEs and technical teams to maintain the security and compliance of third-party applications and medical devices
Review vulnerability scan results and security findings to identify security risks requiring remediation
Evaluate the potential impact of identified vulnerabilities and document findings
Identify and document mitigating measures when an application or device is unable to apply a patch
Develop test plans/documentation, conduct testing and validation as appropriate
Use patch management and monitoring tools to automate and streamline patching activities
Work with application owners and technical teams to resolve identified security vulnerabilities
Manage small to medium security projects or sub-projects and follow Project Management standard processes
Communicate project status, progress, issues and roadblocks to project sponsor and manager
Complete project plan components including design, build, testing, validation, training and communication
Respond to application security issues and review security alerts, vulnerability reports and security findings
Investigate security‑related issues and assist in determining root causes
Collaborate with application teams, infrastructure teams and vendors to resolve security concerns
Communicate problem progress and resolution and document activities in Service Manager
Escalate significant risks, unresolved vulnerabilities and recurring issues to senior analysts and management

Requirements

Master’s degree in computer science, a related field, or a clinical field and two years’ work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR
Bachelor’s degree in computer science, a related field, or a clinical field and four years’ work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR
Associate’s degree in computer science, a related field, or a clinical field and five years’ work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR
Six years work related experience in the information technology field or a combination of clinical or operational healthcare environments; OR
Equivalent combination of education and experience where one year of experience will be substituted for an Associate’s degree and two years of experience will be substituted for a Bachelor’s degree
2+ years experience in Healthcare Information Systems, Application Support, Application Security, Security Analysis, Server Administration, or related Information Technology disciplines
Experience reviewing vulnerability assessment results and supporting security remediation efforts preferred
Ability to work in a highly autonomous role by demonstrating self-motivation and creativity in design approach
Ability to function effectively in a very dynamic team environment
Ability to proactively pursue problem resolution independently
Ability to manage multiple complex tasks efficiently while successfully meeting assigned deadlines

Core Competencies

Demonstrates expertise in Security Center operations, vulnerability assessment, and remediation processes while effectively managing small to medium security projects. Proficient in collaborating with technical teams to ensure compliance and security of third‑party applications and medical devices.