Cyber Security Analyst II in Anderson, South Carolina at AnMed

Located in the heart of Anderson, South Carolina, AnMed is a dynamic, not-for-profit health system dedicated to delivering exceptional care with compassion, innovation, and integrity. At AnMed, our mission is simple yet powerful:

To provide exceptional and compassionate care to all we serve.

AnMed has been named one of the Best Employers in South Carolina by Forbes, reflecting our commitment to a supportive, inclusive, and purpose-driven workplace. Whether you're just starting your career or looking to grow in a new direction, you'll find opportunities to thrive, lead, and make a meaningful impact here.

SUMMARY

Intermediate Level. Employees in this second (2nd) level require greater knowledge, training, and/or experience than level 1. The amount of work review, checks, and supervision are less for an employee at level 2 than at level 1. Complexity or variety of work is moderately higher than level 1 and may involve greater technical, mathematical, or scientific skills than level 1. Some organizations refer to level 2 as the intermediate level. Typically requires experience and advanced specialized training; works under own directives and requires only general supervision.

Provide all of the duties of the Cybersecurity Analyst 1. At Level 2, employees are expected to learn many systems and serve as a primary for one system and a backup for other systems. The Cybersecurity Analyst 2 position include assignments of special nature to include but not limited to, phishing, physical access, camera systems, user activity monitoring, forensic investigations endpoint protection maintenance and monitoring, insider threat monitoring, Security Operations Center (SOC) analyst duties, audits, vulnerability management, and monitoring of authorized access.

Assist in the development and dissemination of security policies and procedures, and coordination of security issues with the Information Services Security team, the Chief Information Security Officer (CISO), and the Corporate Compliance Officer. Works with enterprise systems, software, and tools to ensure that confidentiality, integrity, and availability of the business and electronic health record data is always maintained. Provide periodic full system audits of user access within our business and clinical application systems. Provides security analyst functions through security software and tools.

RESPONSIBILITIES

· Monitors access to systems, departments and users, as well as outside entities that have submitted the correct paperwork.

· Ensure adequate security is provided to users of our business and clinical applications.

· Maintain, update, and create security documentation and forms for management in the requisition of user security access.

· Maintains and monitors endpoint protection systems and other systems to discover anomalies.

· Maintain, update, and create email phishing campaigns and follow up to replies, requests and failures to ensure remediation training is completed.

· Maintain and monitor email security systems.

· Work with the security stack of tools to ensure security operations are being performed according to tasks.

· Work with physical access employees to ensure backup of critical systems.

· Work with departmental staff in assisting with reduction of vulnerabilities discovered by system tools.

· Works with the Security Event and Incident Management (SIEM) analyst to monitor anomalies in the systems.

· Responds to threat intelligence alerts and ensures that the appropriate teams are notified for remediation or action.

· Performs the Investigations of suspected security violations.

III. Specialized duties. Review the higher-priority security incidents escalated by triage specialists and do a more in-depth assessment using threat intelligence (indicators of compromise, updated rules, etc.). They need to understand the scope of an attack and be aware of the affected systems. Investigates and responds to verified incidents, performs event correlation and initial containment

QUALIFICATIONS

Prefer 2 years of college, preferably a Computer Science, Cybersecurity, or Information Technology degree; significant experience may substitute for formal training.

The candidate needs 2 or more years of related experience in information systems security or security analyst/auditor roles.

Must obtain and maintain at least one cybersecurity or system relevant certification, Security+, CISSP, etc. preferred