Cyber Threat Analyst

What you will be doing:

The Cyber Threat Analyst is responsible for monitoring and responding to security events, conducting detailed analyses of security incidents, and assisting in the development of security policies. This role serves as an intermediate step between a Security Operations Analyst and an Associate Information Security Engineer, handling more complex security incidents and providing mentorship to junior analysts.

A more advanced role, but like the Security Operations Analyst, the Cyber Threat Analyst is responsible for activities relating to monitoring and responding to security events. The Cyber Threat Analyst receives, researches, triages and documents all security events and alerts as they are received. This individual supports multiple security-related platforms and technologies, interfacing with others within the IT organization, as well as other internal business units and external customers/partners. Events will be generated from endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third parties and other sources. The Cyber Threat Analyst also receives information sharing and analysis center (ISAC) information and is expected to hunt for potential compromise across the infrastructure.

The Cyber Threat Analyst reports to the Senior Manager Support Services and is an involved member of the SOC team. This role must display an in-depth understanding of current trends and technologies related to IT security and compliance and contribute to the company IT security strategy and roadmap. This role is part of a 24X7 on-call rotation which has strict SLA response commitments.

Key Responsibilities

Responsibility #1 - 70%

Monitoring and Responding to Security Events

• Monitor security events from various sources, including endpoints, networks, SIEM systems, and threat intelligence platforms.

• Respond to these events promptly and effectively.

Incident Analysis and Investigation

• Conduct detailed analyses of security incidents to understand the nature and impact of the threat.

• Identify the source and destination IP addresses, assess the impact of the attack, and investigate the attack using internal and external tools.

Documentation and Reporting

• Document all security events and incidents thoroughly.

• Create incident timelines, record evidence, and prepare detailed reports on findings.

Responsibility #2 - 20%

Recommend enhancements, implement, and manage security tools

• Provide feedback around current monitoring and alerting to improve detection and alerting.

• Enhance analysis through automation.

• Participate in the administration and/or review of access reviews, firewall rule reviews, quarterly web application firewall reviews, and web proxy policy exceptions.

Responsibility #3 - 10%

Reduce downtime and ensure business continuity

• Proactively notifying the appropriate stakeholders about serious security events.

Mentorship and Training

• Provide guidance and support to junior analysts, helping them develop their skills and knowledge.

Proactive Security Measures

• Involved in proactive security measures, such as threat hunting and vulnerability assessments, to identify and mitigate potential threats before they can cause harm.

Required Qualifications

Work Experience:

Education:

Preferred Qualifications

Skills:

• Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP and other network and system monitoring tool

• Working knowledge/experience with network systems, security principles, applications and risk and compliance initiatives such as Payment Card Industry (PCI), Health Information Portability and Accountability Ace (HIPAA), Sarbanes-Oxley Act (SOX) and the General Data Protection Regulation (GDPR)

• Experience with the following skills: network defense, ethical hacking, incident response, computer forensics, and reverse engineering

• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively

• Required participation in 24X7 on-call rotation and availability to assist with issues that arise outside of business hours.

Experience:

• 3-5 years of information security monitoring and response or related experience desired

• Experience with user and entity behavior analytics (UEBA) and security orchestration and automation (SOAR) desired

Education:

• Bachelor's Degree; SANS GCIH or GCIA; Security+, Network+, CISSP a plus

Additional Job Requirements:

• Remain in a stationary position for prolonged periods of time

• Be adaptive and change priorities quickly; meet deadlines

• Attention to detail

• Operate computer programs and software

• Ability to communicate effectively with audiences in person and in electronic formats.

• Day-to-day contact with others (co-workers and/or the public)

• Making independent decisions

• Ability to work in a collaborative business environment in close quarters with peers and varying interruptions

Qualified full-time and part-time employees also receive access to the following benefits:

• Health, dental, vision, life and disability insurance

• 401k retirement program

• Paid time off

• Participation in Premier's employee incentive plans

• Tuition reimbursement and professional development opportunities

Premier at a glance:

• Ranked #1 on Charlotte's Healthiest Employers list for 2019, 2020, 2022, and 2023 and 21st Healthiest Employer in America (2023)

• Named one of the World's Most Ethical Companies by Ethisphere Institute for the 16th year in a row

• Modern Healthcare Best in Business Awards: Consultant - Healthcare Management (2024)

• The only company to be recognized by KLAS twice for Overall Healthcare Management Consulting

For a listing of all of our awards, please visit the Awards and Recognition section on our company website.

Employees receive:

• Perks and discounts

• Access to on-site and online exercise classes

Premier is looking for smart, agile individuals like you to help us transform the healthcare industry. Here you will find critical thinkers who have the freedom to make an impact. Colleagues who share your thirst to learn more and do things better. Teammates committed to improving the health of a nation. See why incredible challenges require incredible people.

Premier is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to unlawful discrimination because of their age, race, color, religion, national origin, ancestry, citizenship status, sex, sexual orientation, gender identity, gender expression, marital status, familial status, pregnancy status, genetic information, status as a victim of domestic violence, covered military or protected veteran status (e.g., status as a Vietnam Era veteran, disabled veteran, special disabled veteran, Armed Forces Serviced Medal veteran, recently separated veteran, or other protected veteran) disability, or any other applicable federal, state or local protected class, trait or status or that of persons with whom an applicant associates. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. In addition, as a federal contractor, Premier complies with government regulations, including affirmative action responsibilities, where they apply. EEO / AA / Disabled / Protected Veteran Employer.

Premier also provides reasonable accommodations to qualified individuals with a disability or those who have a sincerely held religious belief. If you need assistance in the application process, please reply todiversity_and_accommodations@premierinc.comor contact Premier Recruiting at 704.816.5200.

Information collected and processed as part of any job application you choose to submit to Premier is subject to Premier'sPrivacy Policy.