Cybersecurity Analyst

Discover Vanderbilt University Medical Center: Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of diverse individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health recognizes that diversity is essential for excellence and innovation. We are committed to an inclusive environment where everyone has the chance to thrive and where your diversity of culture, thinking, learning, and leading is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt's mission is to advance health and wellness through preeminent programs in patient care, education, and research.

Organization:

Job Summary:

.

KEY RESPONSIBILITIES

• Conduct regular vulnerability assessments and penetration tests to identify weaknesses in network infrastructure.

• Assist in analyzing security logs and alerts to detect and reporting potential security incidents to the respective support team.

• Collaborate with cross-functional teams to implement security best practices and mitigate identified vulnerabilities.

• Stay informed about the latest security trends, vulnerabilities, and exploits to proactively address emerging security issues.

• Assist in the development and implementation of security policies, procedures, and controls.

• Leverage Open-Source Intelligence to help secure assets and property on the network.

TECHNICAL CAPABILITIES

• Vulnerability Security Researcher (Novice) - Conduct research and analyze emerging cyber threats and vulnerabilities. Has existing knowledge of areas that contain Cybersecurity knowledge or how to search for new areas where information can be found. Able to provide timely intelligence to inform security strategies and Cybersecurity management. This will include oral and written notification to the necessary parties.

• Conduct Vulnerability Assessment (Novice) - Conduct vulnerability scans on various items on the network. Provide timely reports to any stakeholders of the scans and Cybersecurity management. Will be expected to identify vulnerabilities that need to be remediated and provide guidance on potential mitigations for the vulnerabilities. Has conducted a vulnerability assessment in the past on an application or Operating System in the past. Basic knowledge of the following: Operating Systems, Software packages, networking, ports, protocols, and patching procedures.

• Conduct Penetration Test (Novice) - Will be expected to participate in internal penetration testing exercises. This will include providing a detailed write-up of the engagement. Will work with various key stakeholders to report what exactly occurred. Basic knowledge of the following: navigating operating systems, installing software packages, networking, exploits, conducting reconnaissance procedures.

• Escalation/Troubleshooting (Novice) - Will be expected to be a technical resource for any issues that may arise from scanning or assessing applications. They will be expected to report the issue to the necessary parties and follow through until the issue is resolved.

• Consultation (Novice) - Will provide consulting services to VUMC support personnel as designated by VEC SOS leadership. They will operate in both a per directive and per request basis through approved methods. These include, but not limited to approved short-term and long-term initiatives.

• Project Resource (Novice) - Will assist in cybersecurity centric projects for the institution. They will be expected to be assigned to multiple initiatives at the same time. They will be expected to operate in both an independent and team environment executing proper time and resource management skills. Regular reporting cadence with their director is expected.

About the Department:

Vanderbilt Health - VUMC Enterprise Cybersecurity (VEC)

VEC provides information security service solutions for securing all administrative, clinical and research operations for all of Vanderbilt Health, the largest non-government employer in Middle Tennessee.

Vanderbilt Health is always growing, with our current environment of 7 hospitals, nearly 40K staff, over 40K workstations, over 160K network connections, and numerous data centers and cloud environments, securing our health system is truly a challenge!

To meet the challenge, VEC is led by 2 Vice Presidents and is structured with many dedicated teams, including: Active Vulnerability Assessment, Business Information Security Office, Business Resilience Services, Identity and Directory Services, Policy and Compliance, Security and Architecture Assurance, Security Engineer Services, Security Operations Center, and Threat Detection and Response.

VEC also employs state-of-the-art technology and partners with the many IT and operational teams across the enterprise to ensure a partnered, cohesive, and comprehensive approach to information security.

At our growing health system, we support each other and encourage excellence among all who are part of our workforce. High-achieving employees stay at Vanderbilt Health for professional growth, appreciation of benefits, and a sense of community and purpose.

Our professional administrative functions include critical supporting roles in information technology and informatics, finance, administration, legal and community affairs, human resources, communications and marketing, development, facilities, and many more.

At our growing health system, we support each other and encourage excellence among all who are part of our workforce. High-achieving employees stay at Vanderbilt Health for professional growth, appreciation of benefits, and a sense of community and purpose.

Core Accountabilities:

Core Capabilities :

Position Qualifications:

Responsibilities:

Certifications:

Work Experience:

Experience Level:

Education:

Vanderbilt Health recognizes that diversity is essential for excellence and innovation. We are committed to an inclusive environment where everyone has the chance to thrive and to the principles of equal opportunity and affirmative action. EOE/AA/Women/Minority/Vets/Disabled