Cyber Security Analyst - Medical Devices

Note: If you are CURRENTLY employed at Children's and/or have an active badge or network access, STOP here.  Submit your application via Workday using the Career App (Find Jobs).

Work Shift

Day

Work Day(s)

Monday-Friday

Shift Start Time

7:30 AM

Shift End Time

4:00 PM

Worker Sub-Type

Regular

Children’s is one of the nation’s leading children’s hospitals. No matter the role, every member of our team is an essential part of our mission to make kids better today and healthier tomorrow. We’re committed to putting you first, and that commitment is at the heart of our company culture: People first. Children always. Find your next career opportunity and make a difference doing what you love at Children’s.

Job Description

Serves as lead for day-to-day operational specialist in the area of information security for healthcare technology management. Oversight of the medical device security framework for integration and supplemental support into Children’s Medical Equipment Management plan. Job duties include supporting the technical aspects of Clinical Engineering’s new equipment, software upgrades, patching, password management, and and is to be the liaison with IS&T resources on such projects. The Sr. Healthcare Technology Cybersecurity Analyst also provides both technical and reporting guidance and support to team members as it relates to systems used for computerized maintenance management software. Additionally, they will partner with the IS&T security team on the collection and reporting of designated metrics and ensures that all identified medical devices are monitored for patching status, password management and vulnerability management. Understands multiple security platforms and layers, including vulnerability management, intrusion prevention systems, logging correlation/management, incident response, operating systems, protocols, and antivirus.

Experience

• Three years of experience in any combination of support and monitoring of security endpoints/servers, e.g., patch deployment/risk assessment/vulnerability scanners/security incident and event monitoring solutions/antivirus products, network security protocols and methodologies, information security and information technology controls, security penetration and vulnerability assessments, systems/network administration

Preferred Qualifications

• Five years of experience in computer operations, information security, and/or risk management
• Experience in a healthcare setting
• Experience specifically with Medical Equipment security and management

Education

• Bachelor's degree in computer sciences, information technology, related field, or equivalent senior experience

Certification Summary

• No professional certifications required

Knowledge, Skills, and Abilities

• Solid knowledge of Health Insurance Portability and Accountability Act, Joint Commission, and other information technology security governing bodies
• Strong knowledge of accepted information systems and technology security regulations
• Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s)
• Well-developed organizational, written communication, and analytical skills
• Must be able to function in a dynamic environment subject to impromptu changes in schedules and priorities

Job Responsibilities

• Develops capabilities necessary to monitor and detect indicators of compromise using security scripts, tools, and services. Ensures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices.
• Assists and leads with the definition and implementation of countermeasures or mitigating controls to help monitor and detect indicators of compromise using security scripts, tools, and services.
• Works closely with the Biomedical Network Analyst, Information Security Analyst, Security Architect, Network infrastructure team, and business units to help implement security infrastructure and technical controls. Serves as an escalation point for complex and sensitive information security issues.
• Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance.
• Performs detailed analysis of business need, identifies IT security impacts or considerations, and translates into secure, viable technical