Cyber Security Analyst II (Remote)

Availity delivers revenue cycle and related business solutions for health care professionals who want to build healthy, thriving organizations. Availity has the powerful tools, actionable insights and expansive network reach that medical businesses need to get an edge in an industry constantly redefined by change.

At Availity, we're not just another Healthcare Technology company; we're pioneers reshaping the future of healthcare! With our headquarters in vibrant Jacksonville, FL, and an exciting office in Bangalore, India, along with an exceptional remote workforce across the United States, we're a global team united by a powerful mission.

We're on a mission to bring the focus back to what truly matters – patient care. As the leading healthcare engagement platform, we're the heartbeat of an industry that impacts millions. With over 2 million providers connected to health plans, and processing over 13 billion transactions annually, our influence is continually expanding.

Join our energetic, dynamic, and forward-thinking team where your ideas are celebrated, innovation is encouraged, and every contribution counts. We're transforming the healthcare landscape, solving communication challenges, and creating connections that empower the nation's premier healthcare ecosystem.

The Cybersecurity Analyst II is a member of the Security Operations Center, Cyber Defense team responsible for the protection of Availity’s online and corporate systems. This role will actively monitor, analyze, assess, and respond to alerts and detections of abnormal or potential malicious network or host behavior. The member will also be regularly exposed to other elements of the Cyber Defense team’s functions such as incident response, host and network forensics, offensive security and cyber threat intelligence.

Sponsorship, in any form, is not available for this position.

Location: Remote, US

Why you want to work on this team:

• This team is highly invested in sharpening and growing your skills, therefore advanced and continuation training is a high priority.
• We strive to grow our analysts and engineers to be versatile and highly contributable to the team’s mission, therefore we encourage members to experience and gain exposure to multiple functions and capabilities of the SOC.
• We pride ourselves in constantly searching for the best technologies to achieve our mission of protecting and securing healthcare data; you will be performing your duties on the most modern and efficient technologies and software!

Role qualifications:

• Bachelor’s degree in Computer Science or a related technology field or equivalent in comparable work experience within the information security field.
• Greater than 2 years experience in cybersecurity operations.
• Extensive experience with SIEM/SOAR/EDR tools.
• Extensive experience with Splunk.
• Strong understanding of network traffic principles, as well as ports, protocols and services (SSLP, HTTP, FTP, NTP, NSF, SSH, LDAP, etc).
• Strong understanding of network infrastructure devices such as firewalls, proxies, routers, switches, IDS/IPS.
• Active Directory skills and experience.
• Strong understanding of cybersecurity concepts such as authentication procedures, access controls, encryption, etc.
• Good understanding of modern cyber threats.
• Good understanding of Incident Response principles.
• Good understanding of the MITRE ATT&CK framework.
• Certified in a reputable cybersecurity-related certification such as CompTia Security+, CySA+, or equivalent or greater certification; total cybersecurity experience will be considered as a certification substitute.

Job Preferences:

• Experience with healthcare-related standards (HIPAA).
• Experience or exposure to network or host forensics.
• Understanding of emerging threats and cyber threat hunting.
• Experience in incident response actions, closing an incident from the initial detection to recovery actions.
• Proficiency in at least one scripting language.

What you will be doing:

• Filter, process, and prioritize SIEM detections and integrate with the cyber defense team to mitigate and eliminate any anomalous, abnormal, or malicious host or network behavior.
• Perform network and host analysis of potential intrusions to the network, servers, operating systems, firewalls, proxies and other infrastructure devices.
• Contributing to the team’s threat intelligence platform to ensure the team remains one step ahead of malicious cyber actors.
• Deliver weekly operational metrics that influence leadership’s decision-making on optimizing the security of the network.
• Engage in purple team exercises to documen