Senior Information Security Associate- Attack Surface Reduction

Join us as we work to create a thriving ecosystem that delivers accessible, high-quality, and sustainable healthcare for all.

• Grow your career internally or refer a friend to athenahealth!

Senior Associate (SMTS), Attack Surface Reduction (ASR) team 

Mission: Drive athena’s ASR program, functions and goals.  

This individual will be recognized as a subject matter expert in the area of information security, have deep experience evaluating, securing and remediating errors and system misconfigurations, weaknesses, vulnerabilities and risk assessments across enterprise internal and external digital environments.  

Our target candidate has deep technical security and communication skills. The individual will work closely with the Executive Director of the Threat and Risk Management team in executing a mature vision for how ASR will partner with business technology teams to identify cybersecurity risks and threats, design solutions to protect critical systems, and improve the overall cyber hygiene of our environment. We are targeting a skilled subject matter expert that can continue a strategic vision while pursuing tactical problem-solving, solutioning and hands-on implementation when required. 

Responsibilities: 

• Provides technical guidance to senior management, business technology teams and functional organizations across the company. 
• Assist in executing a transformation strategy for ASR, that defines the people, process, and technology capabilities needed to improve within the broader NIST Cybersecurity Framework, particularly the “Identify” and “Protect” domains. 
• Leverage Tenable One enterprise platform, to include Tenable.io, Tenable.lumin, Tenable.cs, Tenable.asm modules to deliver value for our security team and for stakeholders across the enterprise. 
• Supports the ASR Team in analyzing vulnerability scan results, identifying vulnerability patterns, and partnering with business technology teams to define and execute streamlined processes to remediate vulnerable systems across our environment. 
• Drives the ASR technology roadmap, defining current and future security platform lifecycles (candidate, POC, deployed, pending decommission) to continuously improve athena’s security controls posture. 
• Actively engages the vendor community to understand the market, identify products that can support athena’s mission, conduct proof of concept evaluations, facilitate sourcing processes, and successfully integrate new security technologies. 
• Participates in and contributes thought leadership and strategic direction during Information Security leadership team meetings and workshops. 
• Supports strategic updates and vision documents, briefings, and reports, and demonstrates excellent communication skills and executive presence in presentations. 

Education and Experience: 

• Bachelor of Science in Information Security or equivalent experience required; Industry Certs and/or Masters Preferred 
• 3+ years of experience with a focus on information security preferred 
• Hands-On experience with an enterprise vulnerability platform required, experience with Tenable preferred.  
• Experience with other Attack Surface Management tools like JupiterOne/Tenable.asm preferred.
• Excel and PowerBI experience desired.

For candidates located in California, Colorado, New York City, and Westchester County (NY), please visit the following link for pay range information: 

California: https://www.athenahealth.com/salary-range/ca-tech-sr-associate 

Colorado: https://www.athenahealth.com/salary-range/co-tech-sr-associate 

New York: https://www.athenahealth.com/salary-range/ny-tech-sr-associate 

Have you notified your current manager of your application?

About athenahealth

Here’s our vision: To create a thriving ecosystem that delivers accessible, high-quality, and sustainable healthcare for all.  

What’s unique about our locations? 
From an historic, 19th century arsenal to a converted, landmark power plant, all of athenahealth’s offices were carefully chosen to represent our innovative spirit and promote the most positive and productive work environment for our teams. Our 10 offices across the United States and India — plus numerous remote employees — all work to modernize the healthcare experience, together. 
 
Our company culture might be our best feature. 
We don't take ourselves too seriously. But our work? That’s another story. athenahealth develops and implements products and services that support US healthcare: It’s our chance to create healthier futures for ourselves, for our family and friends, for everyone.  

Our vibrant and talented employees — or athenistas, as we call ourselves — spark th