Note: The job is a remote job and is open to candidates in USA. Oregon Health & Science University is a public academic health center that provides patient care, conducts research, and trains healthcare professionals. The System Application Analyst - Security secures third-party applications and medical devices, analyzes vulnerabilities, supports remediation, manages assigned security projects, and resolves application security issues.
Responsibilities
- Using security tools, identify and prioritize system vulnerabilities
- Investigate the need for functionality on servers and eliminate any unnecessary features
- Work with SMEs and technical teams to maintain the security and compliance of third-party applications and medical devices
- Review vulnerability scan results and security findings to identify security risks requiring remediation
- Assist in evaluating the potential impact of identified vulnerabilities and document findings
- Identify and document mitigating measures if an application or device is unable to apply a patch
- Develop test plans/documentation, conduct testing and validation as appropriate
- Use patch management and monitoring tools to automate and streamline patching activities
- Support remediation efforts by working with application owners and technical teams to resolve identified security vulnerabilities
- Assume project management responsibilities for small to medium security projects or sub-projects as assigned
- Follow all Project Management standard processes
- Communicate status, progress, issues and roadblocks to project sponsor and manager as appropriate
- Ensure that all components of a project plan are completed including design, build, testing, validation, training and communication
- Respond to issues related to application security
- Review security alerts, vulnerability reports, and security findings
- Investigate security-related issues and assist in determining root causes
- Collaborate with application teams, infrastructure teams, and vendors to resolve identified security concerns
- Communicate problem progress and resolution and document activities in Service Manager as appropriate
- Escalate significant risks, unresolved vulnerabilities, or recurring issues to senior analysts and management
- Perform other appropriate job-related duties as assigned by supervisor
Skills
- Master's degree in computer science, a related field, or a clinical field and two years' work related experience in the information technology field or a combination of clinical or operational healthcare environments; **OR**
- Bachelor's degree in computer science, a related field, or a clinical field and four years' work related experience in the information technology field or a combination of clinical or operational healthcare environments; **OR**
- Associate's degree in computer science, a related field, or a clinical field and five years' work related experience in the information technology field or a combination of clinical or operational healthcare environments; **OR**
- Six years work related experience in the information technology field or a combination of clinical or operational healthcare environments; **OR**
- Equivalent combination of education and experience where one year of experience will be substituted for an Associate's degree and two years of experience will be substituted for a Bachelor's degree
- 2+ years experience in Healthcare Information Systems, Application Support, Application Security, Security Analysis, Server Administration, or related Information Technology disciplines
- Ability to work in a highly autonomous role by demonstrating self-motivation and creativity in design approach
- Ability to function effectively in a very dynamic team environment
- Ability to proactively pursue problem resolution independently
- Ability to manage multiple complex tasks efficiently while successfully meeting assigned deadlines
- Experience reviewing vulnerability assessment results and supporting security remediation efforts preferred
Benefits
- Healthcare for full-time employees covered 100% and 88% for dependents.
- $50K of term life insurance provided at no cost to the employee.
- Two separate above market pension plans to choose from.
- Vacation - up to 200 hours per year dependent on length of service.
- Sick Leave - up to 96 hours per year.
- 9 paid holidays per year.
- Substantial Tri-Met and C-Tran discounts.
- Employee Assistance Program.
- Childcare service discounts.
- Tuition reimbursement.
- Employee discounts to local and national businesses.
Company Overview
Company H1B Sponsorship