Lead Cyber Security Specialist

Job not on LinkedIn

🕒 6 days ago

🇺🇸 United States – Remote

💵 $96.7k - $133k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Franciscan Health

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1875

🏥 Healthcare

⚕️ Healthcare Insurance

🤝 Non-profit

Healthcare • Healthcare Insurance • Non-profit

Franciscan Health is a healthcare organization committed to providing high-quality medical care grounded in the Franciscan tradition. They offer a range of medical services, including clinical and allied health, home health and hospice, nursing, physicians and advanced practice providers, and non-clinical and administrative roles. With a focus on embracing the values of St. Francis to care for those in need, they provide a supportive and fulfilling work environment for their employees, emphasizing a mission of compassion and community engagement. Franciscan Health is dedicated to offering a variety of employment opportunities across different medical specialties and locations.

📋 Description

• Investigate and analyze cyber incident response activities within network environments or enclaves • Collect and analyze data from CND tools, intrusion detection alerts, firewall and network traffic logs, and host system logs • Provide persistent monitoring of designated networks, enclaves, and systems • Interpret, analyze, and report events and anomalies in accordance with computer network directives • Act as the highest-level escalation point • Distribute directives, vulnerability advisories, and threat advisories to identified consumers • Work with Security Architects on roadmaps and implementation plans for security technologies • Lead SOC efforts during high-severity security incident investigations and guide analysts through the incident response lifecycle • Develop, maintain, and safely execute SOAR playbooks; automate enrichment and response tasks • Troubleshoot security data quality issues and validate detections against reliable data • Coach analysts, review investigations, establish investigation standards, and communicate with SOC management and security teams • Build Splunk dashboards and reports measuring data sources, alert volume, detection performance, investigation quality, and SOC effectiveness • Develop procedures for investigating compromised accounts and lateral movement • Work with internal resources and external third parties to design and conduct penetration tests • Create and review cybersecurity policies, procedures, and standards for SOC, Vulnerability Management, and Incident Response

🎯 Requirements

• Required Associate's Degree • 8 years Information Technology or Information Security Department experience required • Preferred Bachelor's Degree • Preferred Certificate • 5 years healthcare industry experience; experience in security operations activities aligning with Essential Job Functions preferred • Splunk Cloud / on-premise experience preferred • Advanced proficiency writing and optimizing complex SPL queries • Experience creating, testing, tuning, and maintaining high-fidelity detections • Experience with risk-based alerting and detection thresholds/governance • Knowledge of SIEM artificial intelligence capabilities • Experience with high-severity security incident investigation and incident response • Experience developing and executing SOAR playbooks • Understanding of security data sources, field extractions, data models, and CIM • Experience building Splunk dashboards and reports • Experience building anomalous user and entity behavior detections • Experience conducting penetration tests • Knowledge of cybersecurity policies, procedures, and standards

🏖️ Benefits

• Comprehensive benefit offerings for eligible employees • Travel is never or rarely required