Sr. II Security Analyst - Vulnerabilities at NYU Langone Health

New York, New York, United States -

Full Time

Start Date

Immediate

Expiry Date

13 Aug, 26

Salary

142987.71

Posted On

15 May, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Vulnerability Management, Penetration Testing, Rapid7 InsightVM, Checkmarx, Secure Coding, Risk Analysis, Scripting, Data Analysis, IT Security Governance, Threat Intelligence, System Hardening, Compliance Management

Industry

Hospitals and Health Care

Description

NYU Langone Health is a fully integrated health system that consistently achieves the best patient outcomes through a rigorous focus on quality that has resulted in some of the lowest mortality rates in the nation. Vizient Inc. has ranked NYU Langone the No. 1 comprehensive academic medical center in the country for three years in a row, and U.S. News & World Report recently placed nine of its clinical specialties among the top five in the nation. NYU Langone offers a comprehensive range of medical services with one high standard of care across 6 inpatient locations, its Perlmutter Cancer Center, and over 320 outpatient locations in the New York area and Florida. With $14.2 billion in revenue this year, the system also includes two tuition-free medical schools, in Manhattan and on Long Island, and a vast research enterprise with over $1 billion in active awards from the National Institutes of Health. For more information, go to NYU Langone Health [http://nyulangone.org/], and interact with us on LinkedIn [https://www.linkedin.com/company/nyulangonehealth/?viewAsMember=true], Glassdoor [https://www.glassdoor.com/Reviews/NYU-Langone-Health-Reviews-E121521.htm], Indeed [https://www.indeed.com/cmp/Nyu-Langone-Health/reviews], Facebook [http://facebook.com/NYULangone], Twitter [http://twitter.com/nyulangone], YouTube [http://www.youtube.com/user/nyulmc] and Instagram [http://instagram.com/nyulangone]. Position Summary: We have an exciting opportunity to join our team as a Sr. II Security Analyst - Vulnerabilities. In this role, the successful analyst will be part of the Penetration Testing and Vulnerabilities Management team. The group is an agile team that effectively test and manage security vulnerabilities for the Medical Center. As a member of the team, the analyst will review a large volume of security event data from a variety of sources with the goal of identifying vulnerabilities and following up with remediation. Job Responsibilities: * * Run weekly and on-demand vulnerability scan with Rapid7(InsightVM) * Perform data analysis and report based on preset criteria * Proactively discover and enumerate vulnerabilities that may not be caught by our scanning tool (e.g. devices default passwords and open Windows shares) * Coordinate remediation efforts with infrastructure teams and application owners * Analyze threat intelligence reports, write risk analysis report for zero-day critical vulnerabilities * Write custom scripts and macros to accomplish and/or automate tasks as needed * Work with infrastructure and all other stakeholders to remediate/mitigate vulnerabilities * Work with stakeholders to harden equipment, operating systems and applications * Using Checkmarx, work with development teams to improve app security via secure coding practices * Manage 30+ servers that fall under our group's purview (InsightVM, Checkmarx), including daily maintenance, patch and upgrade * Conduct security product evaluation and recommendation * Propose and draft security standards * Work tickets assigned to IT Security in Ivanti ticketing system Minimum Qualifications: To qualify you must have a Bachelor's degree from an accredited college/university; Master's degree from an accredited college/university preferred Minimum 6 years of progressive experience in IT security policy and compliance management programs for healthcare or academic medical centers; interaction with and support of clients; risk management and other GRC responsibilities within a large healthcare organization. Demonstrated experience with IT security governance, security education, security scorecards, and ability to work under aggressive deadlines with competing priorities. Qualified candidates must be able to effectively communicate with all levels of the organization. NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents. At NYU Langone Health, we are committed to supporting our workforce and their loved ones with a comprehensive benefits and wellness package. Our offerings provide a robust support system for any stage of life, whether it's developing your career, starting a family, or saving for retirement. The support employees receive goes beyond a standard benefit offering, where employees have access to financial security benefits, a generous time-off program and employee resources groups for peer support. Additionally, all employees have access to our holistic employee wellness program, which focuses on seven key areas of well-being: physical, mental, nutritional, sleep, social, financial, and preventive care. The benefits and wellness package is designed to allow you to focus on what truly matters. Join us and experience the extensive resources and services designed to enhance your overall quality of life for you and your family. NYU Langone Health is an equal opportunity employer and committed to inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration. We require applications to be completed online. View Know Your Rights: Workplace discrimination is illegal [https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf]. NYU Langone Health provides a salary range to comply with the New York state Law on Salary Transparency in Job Advertisements. The salary range for the role is $97,589.95 - $142,987.71 Annually. Actual salaries depend on a variety of factors, including experience, specialty, education, and hospital need. The salary range or contractual rate listed does not include bonuses/incentive, differential pay or other forms of compensation or benefits. To view the Pay Transparency Notice, please click here [https://cdn-static.findly.com/wp-content/uploads/sites/290/2017/04/pay-transp_formattedESQA508c.pdf]

Responsibilities

The analyst will run vulnerability scans using Rapid7 and coordinate remediation efforts with infrastructure teams and application owners. Responsibilities include analyzing threat intelligence, automating tasks via scripts, and improving app security through secure coding practices with Checkmarx.