Position Summary

The IT Security Analyst SR is primarily responsible for the implementation and support of enterprise security for both the data and technology infrastructure utilized by Childrens Memorial Hosptial thereby ensuring that Children's Memorial Hospital maintains a protected Information Technology (IT) infrastructure. Therefore this individual must be literate in current security practices, threat awareness, and other applications of the security process to the organization's needs.The IT Security Analyst is expected to be self-directed and perforn responsbilities with minimal supervision.

Essential Job Functions

1. Develops and manages complex projects related to the security infrastructure and related technologies.
2. Advises management of potential IT security threats and mitigation strategies.
3. Contributes to the development of System/Technology roadmaps. Reviews/evaluates designs to assure consistency with the overall security architecture.
4. Maintans Cisco and other technology vendors wired and wireless network security equipment and software.

a. Reviews multiple metrics, correlates anomalies that impact multiple systems, determines root causes, and implements corrective action.

b. Performs security troubleshooting and analysis utilizing Cisco MARS and other inspection tools

c. Works with IT security team for policy and design needs related to network infrastructure security.

5. Performs a backup role for other IT security and network duties as needed. Participate in other department or organizational project tasks as required.

6. Completes assigned Help Desk support tickets within IM Department standards. Serves as liaison to vendors for equipment and software maintenance.

7. Develops and documents procedures covering all aspects of enterprise-wide network security.

FTE status: FT-80

Requirements

1. Education: Bachelor's Degree in Information Systems/Technology/Computer Science (or equivalent work experience).

2. Comprehensive knowledge of Cisco and other security and network technologies:

a. 3-5 years of experience working with of the following IT security functions: VPN, firewall, anti-virus protection, two-factor authentication, intrusion detection, disk/file encryption, vulnerability assessments and mitigation, risk assessments, platform hardening, and incident response/reporting.

b. 3-5 years of experience working with Microsoft, HP-UX, Solaris, and Windows client/server based equipment/operating systems and applications in a complex enterprise network environment highly desired.

c. 3-5 years experience with the following technologies desired: Cisco ASA firewall/VPN, Cisco Secure IDS, Cisco MARS, Microsoft AD, RSA SecureID, Websense Internet monitoring and MacAfee Webshield appliance.

d. 3-5 years experience with enterprise wireless technology and security.

3. Certifications in the following technologies a plus: CCSP certification (Cisco Certified Security Professional), CISSP (Certified Information Systems Security Professional) and/or MCSA (Microsoft Certified Systems Administrator) or MCSE (Microsoft Certified Systems Engineer) with security specialization.

4. Demonstrated project management skills from both team member and leader roles.

5. Programming or scripting skills necessary to assist in server and client management tasks highly desired.

6. Analytical thinking for effective problem determination and correction within the department and in the user community is essential. The ability to work independently, make decisions under pressure, while providing timely and responsive services are the keys to this position.

7. Excellent time and project management skills, customer service and interpersonal skills, system diagnostic and communication (written and oral) are critical for success in this position.