Sr IT Security Analyst

Overview

At Houston Methodist, the Sr. IT Security Analyst position is responsible for responding to Information Technology security issues throughout the organization and managing IT Security tools used to defend Houston Methodist. Identifies security issues and supports the development of security architecture solutions and implementation plans. This position independently performs security audits and risk assessments. Provides security guidance to stakeholders throughout the organization. Interfaces with technical and non-technical end users and other internal/external groups to assist with security issues and opportunities.

 

Key Responsibilities

• Deploy and manage Extended Detection and Response (XDR) solutions to enhance threat detection and response capabilities.
• Oversee Managed Detection and Response (MDR) services to ensure effective monitoring and incident response.
• Implement and maintain Microsoft Defender for Endpoint (MDE) solutions to protect against malware, ransomware, and other threats.
• Monitor and analyze endpoint security alerts to identify potential security breaches.
• Manage and optimize Security Information and Event Management (SIEM) systems for continuous monitoring and analysis of security events.
• Monitor and troubleshoot security-related issues to ensure seamless protection and access control.
• Conduct regular security assessments and vulnerability scans to identify and address potential risks.
• Develop and implement risk mitigation strategies to enhance the organization’s security posture.
• Collaborate with cross-functional teams to enhance security protocols and integrate security measures into all aspects of the organization’s operations.
• Stay updated with the latest industry trends and best practices in security technologies.
• Provide technical guidance and support to IT staff and end-users.

Skills

• In-depth knowledge of XDR and MDR solutions, including configuration, management, and optimization.
• Strong understanding of Microsoft Defender for Endpoint (MDE) tools and technologies.
• Excellent problem-solving and troubleshooting skills.
• Strong communication and interpersonal skills.
• Ability to analyze complex security data and identify patterns indicative of potential threats.
• In-depth understanding of security best practices and compliance requirements.
• Experience in developing and implementing policies to ensure regulatory compliance.
• Commitment to staying updated with the latest security trends, threats, and technologies.
• Participation in ongoing training and certification programs to enhance security expertise.

 

 

Houston Methodist Standard

HOUSTON METHODIST EXPERIENCE EXPECTATIONS

• Provide personalized care and service by consistently demonstrating our I CARE values:
  • INTEGRITY: We are honest and ethical in all we say and do.
  • COMPASSION: We embrace the whole person including emotional, ethical, physical, and spiritual needs.
  • ACCOUNTABILITY: We hold ourselves accountable for all our actions.
  • RESPECT: We treat every individual as a person of worth, dignity, and value.
  • EXCELLENCE: We strive to be the best at what we do and a model for others to emulate.

• Practices the Caring and Serving Model

• Delivers personalized service using HM Service Standards

• Provides for exceptional patient/customer experiences by following our Standards of Practice of always using Positive Language (AIDET, Managing Up, Key Words)

• Intentionally collaborates with other healthcare professionals involved in patients/customers or employees' experiential journeys to ensure strong communication, ease of access to information, and a seamless experience

• Involves patients (customers) in shift/handoff reports by enabling their participation in their plan of care as applicable to the given job

• Actively supports the organization's vision, fulfills the mission and abides by the I CARE values

Responsibilities

PEOPLE ESSENTIAL FUNCTIONS

• Interfaces with stakeholders throughout the organization to recommend and resolve security issues related to implementation of network, systems and applications security.

• Utilizing a variety of channels, effectively presents security policies, procedures and awareness programs to technical and non technical audiences across the organization.

• Confers with management, programmers and other appropriate stakeholders to support the identification of security applications and data.

• Mentors mor