Senior Information Security Analyst

At Definitive Healthcare, our passion is to transform data, analytics and expertise into healthcare commercial intelligence. We help clients uncover the right markets, opportunities and people, so they can shape tomorrow’s healthcare industry. Our SaaS platform creates new paths to commercial success in the healthcare market, so companies can identify where to go next.  

Our employees are kind, collaborative, energetic, approachable and driven. On top of that, we value the unique perspectives, backgrounds and voices of our employees. Why? Because their diverse experiences drive new ideas and help us build a better community. 

For over 10 years, we’ve built a collaborative culture driven by employees who share a passion for improving the healthcare ecosystem, enjoy giving back to the local community and value diversity and inclusion.  

One of the hallmarks of our culture is our commitment to community service. Through the DefinitiveCares program, employees can work with their choice of more than 40 charitable organizations, supporting causes from hunger and homelessness to healthcare, LGBTQ+ issues, racial justice, women’s initiatives and more. 2021 marked the sixth year that we had 100% employee participation in DefinitiveCares. 

We also provide a range of opportunities for employees to connect with each other. Employees can join any of our employee run affinity groups supporting causes such as women’s empowerment, LGBTQ+, Black, indigenous and people of color (BIPOC), disabilities and working parents and potential for many more. Affinity groups often enable greater education companywide through training, events and speaker series. 

We’re also a great place to work. For five years in a row, we’ve been recognized by the Boston Business Journal and the Boston Globe as a best place to work in Massachusetts. In 2022, Energage recognized us for Culture Excellence in Compensation & Benefits, Innovation, Great Leadership, Purpose & Value and Work-Life Flexibility! 

Think you’d be a good addition to our team? Explore our available positions here. We’d love the chance to get to know you.  

Qualifications  

• Bachelor’s degree in computer science or a related field, or equivalent work experience  
• Minimum 5 years of experience in information security, with at least 3 years in a senior role, leading security projects, and making strategic security decisions.  
• Familiarity with leading vulnerability scanning and assessment tools such as Nessus, Qualys, or Rapid7. Experience in identifying, evaluating, and prioritizing vulnerabilities in a corporate environment. 
• Deep understanding of IAM principles and technologies, including experience with solutions like Okta, Microsoft Azure Active Directory, or SailPoint for managing digital identities and facilitating secure access. 
• Hands-on experience with PAM tools such as CyberArk, BeyondTrust, or Thycotic to secure, control, and monitor access to critical assets and privileged accounts. 
• Proficiency in data encryption, tokenization, and masking technologies. Familiarity with data protection solutions for both at-rest and in-transit data across various platforms and environments. 
• Expertise in configuring and managing SIEM platforms like Splunk, IBM QRadar, or LogRhythm, including creating custom rules, dashboards, and alerts to monitor security events. 
• Experience with EDR tools such as CrowdStrike Falcon, SentinelOne, or Carbon Black for real-time monitoring and response to threats at the endpoint level. 
• Knowledge of DLP strategies and tools like Symantec DLP, McAfee DLP, or Digital Guardian for protecting sensitive data and preventing unauthorized data transfer. 
• Strong understanding of Microsoft Active Directory and Group Policy Objects (GPOs) for managing users, groups, and policies within a Windows environment. 
• Experience with information security frameworks including ISO 27001, NIST Cybersecurity Framework, and other compliance frameworks.   
• Experience with cloud platforms (AWS, Azure, GCP) and understanding of cloud security best practices, tools, and services to secure cloud environments. 
• The ability to analyze complex security systems and threats, identify vulnerabilities, and devise strategic solutions to mitigate risks. 
• Meticulous attention to detail in monitoring systems, analyzing security alerts, and implementing security measures to prevent oversights that could lead to vulnerabilities. 
• Excellent written and verbal communication skills, including the ability to articular complex issues to technical and non-technical stakeholders.  
• Demonstrated critical thinking, problem-solving, and project management skills.  

 

Certifications (Any of the Following) 

• (CISSP) Certified