IT SECURITY ANALYST III

What awaits you:

• Work-life balance - This is a hybrid role-Hanover, MD. Must report on site at least quarterly. Applicants living in MD, DC, VA, PA, DE, or FL will be given first consideration.
• Medical, Dental, and Vision Insurance.
• 403B Savings Plan w/employer contribution.
• Paid Time off & Paid holidays.
• Health and wellness programs and MORE!

Position Summary:

The IT SECURITY ANALYST III is responsible for implementing and supporting information security engineering for all Johns Hopkins Health Plans (JHHP) information systems. Reviews regulatory security policies, as well as best practices, and develops the technical solution required in order to implement those requirements on servers, routers, firewalls and other LAN/WAN equipment. Works with the LAN Administrators and Network Engineers to monitor the security posture of all networked systems and takes appropriate steps to quickly deal with any vulnerabilities. Provides network and security engineering expertise and guidance for all aspects of information assurance (IA), including those systems required to meet DoD regulations and requirements. Supports the year-round work of maintaining security posture to meet DoD DIACAP requirements. Works with the other members of the Information Security team to prepare for and successfully pass the annual audit. Maintains technical expertise on all JHHP networked hardware and software and appropriate security tools for those products.

Experience needed:

• A minimum of two years' experience in a LAN Administration or Network Engineering position.
• Previous hands-on cybersecurity experience in a Security Operations, Threat Detection, Incident Response, or Vulnerability Management role preferred.
• Demonstrated experience securing cloud environments (Azure Government and/or AWS GovCloud)
• Proven experience with SIEM (e.g., Splunk), EDR, vulnerability management tools (e.g., Tenable), and network security technologies (e.g., Palo Alto)
• Strong working knowledge of NIST SP 800-171, CMMC 2.0, and continuous monitoring practices
• Experience conducting incident investigations, threat hunting, and root cause analysis
• Background in network engineering or system administration is preferred, but dedicated cybersecurity experience is required

Education:

• A 4 year college degree plus 2 years' experience in a network or security-related position

OR

• an Associate's degree plus 3 years' experience in a security-related position

OR

• 4 years' experience in a security-related position

OR

• current industry certification plus 2 years of experience in a network or security-related position

Required Licensure, Certification:

• Security + or CISSP strongly preferred