Blackwell Security Analyst L2 - Blackwell Security, Inc.
Ann Arbor, MI
About the Job
About Us
We are a venture-backed start-up specializing in delivering world-class cybersecurity products and services to the healthcare industry. Designed as a comprehensive managed services ecosystem, our mission is to secure the future of healthcare through innovation and expertise.
Summary
As a Security Analyst focusing on Log and Threat Analysis, you will be an essential part of our Security Operations Center (SOC). Your primary responsibility will be to analyze logs and identify threats to ensure the security of our healthcare clients' digital assets. You will work closely with both internal teams and clients to proactively mitigate risks and respond to security incidents.
About the Role
As a Security Analyst specialized in Log and Threat Analysis at Blackwell Security, Inc., you will be at the forefront of our mission to safeguard healthcare organizations. This role involves deep technical expertise as you will be analyzing large sets of log data and other security-related information to identify potential threats, vulnerabilities, and malicious activities targeted towards our clients.
Your daily work will consist of analyzing logs from various systems and applications, correlating events across multiple sources, and working closely with our incident response team to tackle security incidents effectively. This role is not just about monitoring; it's about understanding the intricacies of cyber threats in the healthcare context and developing strategies to mitigate risks before they impact our clients.
Your expertise will guide our clients in navigating the complex security challenges unique to the healthcare industry, such as regulatory compliance (HIPAA), protecting sensitive patient data, and securing medical devices.
Key Responsibilities
Log Analysis
- Analyze logs from various sources to identify suspicious activities.
- Correlate logs to distinguish real threats from false positives.
Threat Detection and Analysis
- Continuously monitor threat landscapes to anticipate new types of attacks or vulnerabilities specific to the healthcare sector.
- Collaborate with threat intelligence teams to understand emerging threats and adapt monitoring strategies accordingly.
Incident Response
- Assist in the incident response process, particularly in the identification and initial assessment of security incidents.
- Work closely with senior analyst to create incident reports and carry out root cause analysis.
Client Interaction
- Work closely with clients to communicate security concerns, updates, and incident reports.
- Assist in client security audits and provide recommendations for improvements.
Team Collaboration
- Collaborate with internal SOC and IT teams to ensure consistent and comprehensive security monitoring.
- Support the development and maintenance of documented playbook procedures, knowledge articles, and training materials.
- Support peers and senior personnel with documentation, metrics, and security program initiatives in a force multiplier role.
Qualifications
- Bachelor’s Degree in Computer Science, Information Security, or a related field.
- Minimum 3 years of experience in cybersecurity, with at least 2 years in an analyst level role.
- Start-up experience is a plus.
- Experience working with enterprise level access management, SIEM, IDS/IPS, end-point protection, and multi-factor authentication systems.
- Proficiency with scripting and query languages (Python, Powershell, SQL, etc.) with a passion for automation.
- Familiarity with healthcare regulations and compliance is a plus.
- Excellent analytical, problem-solving, and communication skills.
- Certifications such as CompTIA Security+, Network+, GCIA, GSEC, CISSP, or equivalent are strongly preferred.
Equal Employment Opportunity
We're proud to be an equal opportunity employer and welcome our employee's differences, regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or Veteran status. Different makes us better - Join us.