IMPACT LIVES, IMPACT COMMUNITY

Family Health Centers of San Diego (FHCSD) is passionate about providing exceptional health care to all, especially underserved communities with limited health care options. Founded by a Latina grandmother/community advocate over 50 years ago in Barrio Logan, FHCSD has grown into one of the largest community health systems in the country. With over 90 sites, over 227,000 patients, and over 1.1 million healthcare visits last year, we provide a wide variety of health care and outreach services to a very diverse patient population. We are proud of our mission, our lasting community impact, and the cultural and individual diversity of our staff.

JOB PROFILE SUMMARY

The Security Operations Center (SOC) Analyst monitors and analyzes the cybersecurity information of technology infrastructure for the organization. This infrastructure is comprised of Windows and Linux servers, MS SQL, IIS, Apache, Azure SaaS/PaaS, Microsoft 365, Exchange Online, VMware virtualization, EntraID, Active Directory, layer-2 and layer-3 networking equipment, wireless access points, and IoT medical devices. This position will monitor, analyze, investigate, and threat hunt cybersecurity events for all systems and networks and assist in triaging, escalating, investigating, and conducting root cause analysis of cybersecurity incidents within the environment.
The SOC Analyst performs tasks at the direction of Manager, IT Operations & Infrastructure and the SOC Engineers related to our IT Security policies and Incident Response to maintain strict security postures and compliance with HIPAA, PCI-DSS, and CCPA regulations.

PHYSICAL REQUIREMENTS/WORKING ENVIRONMENT

Bending (neck): OCCASIONALLY (1 - 3 HRS)
Bending (waist): OCCASIONALLY (1 - 3 HRS)
Carrying 0 - 10 lbs: OCCASIONALLY (1 - 3 HRS)
Carrying 11 - 25 lbs: RARELY (0-1 HRS)
Carrying 25 - 50 lbs: RARELY (0-1 HRS)
Carrying 51 - 75 lbs: NEVER
Carrying 75 lbs: NEVER
Climbing (ladder): NEVER
Climbing (stairs): OCCASIONALLY (1 - 3 HRS)

Experience/Specialized skills (including Language)

• At least 2 years of experience in Cybersecurity with an emphasis on data and security event correlation, and incident response.
• Or equivalent combination of education and experience that provides the skills, knowledge and ability to perform the essential job duties, and which meets any required state or federal certification requirements.
• CSSP, CompTIA Security+, CompTIA CySA+, CompTIA Network+, ISACA CCOA, MS Azure Fundamentals.
• Intermediate level knowledge and training in cybersecurity event correlation, incident response, threat hunting.
• Must be detail-oriented and committed to providing work of consistently high quality.
• Must be self-sufficient, innovative, and able to work under minimal direct supervision.
• Some training and experience in server and network hardware and software, including MS Solutions and VMware and Azure virtualization.
• Intermediate level troubleshooting and diagnostic skills.
• Working knowledge of and demonstrated competency in applying current concepts of network, system, application, and cloud security.
• Working knowledge of and demonstrated competency in applying current concepts of vulnerability and risk management; CIS hardening, patch management, GPO.
• Working knowledge of and demonstrated competency in applying current concepts of identity and access management; Just in Time Access, Just Enough Access, identity Provider/SSO, conditional access, MFA

Education/Certifications/Licenses/Registrations

• Associate’s degree in Cybersecurity, or equivalent experience.
• Ability and means to travel as needed in a timely manner within San Diego County, to locations that may have limited access to public transportation; proof of liability and property damage insurance on vehicle used is required. DRIVER REQUIREMENTS: Licensed for a minimum of 3 years; No more than 2 violations and/or accidents within 3 years; No vehicle related suspensions/reinstatements; No DUI, reckless or felony Driving with 7 years

• Triage, investigate, and remediate cybersecurity incidents.
• Conduct proactive threat hunting using a SIEM, EDR and other relevant tools.
• Assist in networking and infrastructure hardening activities.
• Assist in vulnerability management and patching remediation activities including.
• Assist in asset discovery and validation of asset visibility for vulnerability scanning processes.
• Assist in analyzing infrastructure and penetration testing scan results.
• Coordinate and administer cybersecurity user awareness training campaigns.
• Act as an escalation point for IT Technical Support staff for any cybersecurity related incidents.
• Perform other duties as assigned.

Experience/Specialized skills (including Language)

• At least 2 years of experience in Cybersecurity with an emphasis on data and security event correlation, and incident response.
• Or equivalent combination of education and experience that provides the skills, knowledge and ability to perform the essential job duties, and which meets any required state or federal certification requirements.
• CSSP, CompTIA Security+, CompTIA CySA+, CompTIA Network+, ISACA CCOA, MS Azure Fundamentals.
• Intermediate level knowledge and training in cybersecurity event correlation, incident response, threat hunting.
• Must be detail-oriented and committed to providing work of consistently high quality.
• Must be self-sufficient, innovative, and able to work under minimal direct supervision.
• Some training and experience in server and network hardware and software, including MS Solutions and VMware and Azure virtualization.
• Intermediate level troubleshooting and diagnostic skills.
• Working knowledge of and demonstrated competency in applying current concepts of network, system, application, and cloud security.
• Working knowledge of and demonstrated competency in applying current concepts of vulnerability and risk management; CIS hardening, patch management, GPO.
• Working knowledge of and demonstrated competency in applying current concepts of identity and access management; Just in Time Access, Just Enough Access, identity Provider/SSO, conditional access, MFA.

Education/Certifications/Licenses/Registrations

• Associate’s degree in Cybersecurity, or equivalent experience.
• Ability and means to travel as needed in a timely manner within San Diego County, to locations that may have limited access to public transportation; proof of liability and property damage insurance on vehicle used is required. DRIVER REQUIREMENTS: Licensed for a minimum of 3 years; No more than 2 violations and/or accidents within 3 years; No vehicle related suspensions/reinstatements; No DUI, reckless or felony Driving with 7 years.