Note: The job is a remote job and is open to candidates in USA. USAble Life is hiring a Senior or Lead Cybersecurity Analyst to advance enterprise security capabilities and ensure business solutions meet security, privacy, and regulatory requirements. The role supports security monitoring, incident response, vulnerability management, identity and firewall administration, risk assessments, and cross-functional security initiatives.
Responsibilities
- Analyze security logs and events using SIEM; conduct vulnerability assessments and penetration testing; develop and maintain scripts, routines and software to perform vulnerability threat assessments; investigate and respond to security incidents
- Participates as a member of the security incident response team and evaluates security incidents, develops solutions and communicates status and outcomes to management
- Conducts technical analysis to determine scope, impact, and root cause of security incidents; coordinate containment and recovery actions; and communicates status and outcomes to management
- Use security monitoring and forensic tools to collect and analyze evidence, document findings, and produce incident reports and post-incident recommendations
- Maintain effectiveness of enterprise security subsystems and controls
- Provides guidance to junior staff
- Provide guidance on design, strategy and administration for Active Directory/Group Policy and Microsoft Entra ID (Azure AD), including lifecycle management, privileged access, and policy enforcement
- Provide design, oversight and administration of customer identity and access management systems
- Integrate IAM controls with security monitoring, vulnerability management, and change processes
- Regularly review security best practices to ensure enterprise firewalls are properly administered and hardened, including rule set management, change and configuration management, and timely firmware and software patching
- Apply network security best practices and integrate firewall telemetry with SIEM
- Review current and proposed architectures, identify design gaps, and recommend security enhancements
- Evaluate security implications of system changes and ensure secure configurations
- Perform and review comprehensive risk assessments, including third-party and vendor security
- Contribute to policy and procedure development aligned to frameworks
- Maintain the enterprise security awareness training program and track control effectiveness
- Work closely with Cybersecurity leadership and Infrastructure/Operations teams; serve as a security SME
- Performs other related duties and responsibilities as assigned
- Lead design, strategy and administration for Active Directory/Group Policy and Microsoft Entra ID (Azure AD), including lifecycle management, privileged access, and policy enforcement (Lead Cybersecurity Analyst Only)
Skills
- Strategic thinker with strong communication skills and ability to build trust through mutual respect and ongoing communication
- Organized, collaborative problem solver effective in dynamic environments
- Solid grounding in networking and security best practices
- Strong working knowledge with COBIT, NIST, or ISO frameworks
- Project management experience
- Experience and knowledge base of solutions, trends, and information security systems including: SIEM operations, vulnerability management, MFA/SSO, Active Directory/Group Policy, Microsoft Entra ID (Azure AD)
- Firewall administration and network security tooling
- Bachelor's degree in Information or Cyber Security, Telecommunications, Engineering, Computer Science, Management Information Systems, or relevant field (equivalent military or work experience can be considered in lieu of formal education)
- 5+ years in information security, 5+ years in IT, and 3+ years supporting identity environments
- 8+ years in information security, 10+ years in IT, and 7+ years supporting identity environments (Lead Cybersecurity Analyst Only)
- CISSP or equivalent in good standing; any applicant working on their certification will meet this requirement as long as certification is obtained within 1 year of hire date
- Advanced certifications (e.g., CCIE, CCNP, CCSP, CISM, CRISC, CEH or SANS)
- Experience in regulated environments and industry audits
- Understanding of HIPAA/HITECH environments
- Blue Cross Blue Shield or other health and/or life insurance company experience
- Experience with Department of Insurance audits
- Knowledge of the insurance industry regulatory landscape
- Experience with Microsoft Windows platforms and major cloud platforms
- Cloud Platform experience with major vendors (Azure and AWS), including PaaS, SaaS, IaaS
- Knowledge of the following concepts: Firewalls, VPN, IPS, Building Security Systems (cameras, doors, badge scanners), Endpoint protection, Mobile Device Management (MDM), Web proxy and traffic monitoring
Benefits
- A culture that values employees and celebrates, empowers, and inspires a diverse workforce
- Outstanding and affordable benefits package
- PTO provided at date of hire
- 11 paid holidays
- 401(k) with up to 6% match; fully vested from day 1
- Remote opportunities with company-provided equipment
- Team-oriented, collaborative group of peers
- Career advancement opportunities
- Tuition Reimbursement
- Employee Assistance Program
- Inclusion Council and Employee Resource Groups
- Recharge Days and Volunteer Time Off
- Eligible for an annual incentive plan based on company performance and individual performance
Company Overview