Sr or Lead Cybersecurity Analyst

When it comes to making a meaningful difference in the lives of our customers and employees, USAble Life is always ready.  We are a diverse group of individuals working together to go the extra mile. Through our DEI initiatives, employees feel empowered to bring their talents and voice to our culture. 

Our passion for delivering the best products is matched only by our passion for our people. We are committed to making a meaningful difference in the lives of others which extends beyond our office walls. USAble Life has a long tradition of supporting our communities, and we’re proud of the fact that our employees share that commitment.   

We have been recognized as a “Best Places to Work” in Arkansas, Florida, and Hawaii. You’ll be rewarded with opportunities for personal and professional development and opportunities for advancement.  This, coupled with our engaging culture and a comprehensive benefits package, ensures we are committed to our employees.    

Check out how we make a meaningful difference in the lives of others!  

https://player.vimeo.com/video/518665804 

What We Offer You:  

• A culture that values employees and celebrates, empowers, and inspires a diverse workforce
• Outstanding and affordable benefits package
• PTO provided at date of hire
• 11 paid holidays
• 401(k) with up to 6% match; fully vested from day 1
• Remote opportunities with company-provided equipment
• Team-oriented, collaborative group of peers
• Career advancement opportunities
• Tuition Reimbursement
• Employee Assistance Program
• Inclusion Council and Employee Resource Groups
• Recharge Days and Volunteer Time Off 

Pay Transparency: Our salary ranges are structured to provide opportunities for growth and advancement within a role. As a result, most new hires are placed between the minimum and midpoint of the range based on qualifications and experience, while the top of the range is generally reserved for employees who have demonstrated sustained expertise and performance in the position. The anticipated pay for new hires entering as a Sr Cybersecurity Analyst is between $100,000 to $125,000. The anticipated pay for new hires entering as a Lead Cybersecurity Analyst is between $115,000 to $144,000.  Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications, and company tenure & equity. In addition to base compensation, this role is eligible for an annual incentive plan based on company performance and individual performance. 

Sr Cybersecurity Analyst Overview

The Senior Cybersecurity Analyst partners across the organization to ensure business solutions are designed and operated in compliance with security, privacy, and regulatory requirements, while advancing enterprise security capabilities. This role acts with vision in identification and assessment of emerging information security trends and alignment to existing architectures for the betterment of the overall organization. This position assists in information security functions including security configuration, continuous monitoring of centralized information management systems, investigation and response to security incidents, vulnerability management, firewall administration and oversight, identity management, and the administration of global security management systems.  This position will also provide support for security-based control frameworks. Additionally, it is a role that is heavily involved in cross-functional projects to positively impact the Company and customers, modeling the values and inclusiveness of all employees.

Lead Cybersecurity Analyst Overview

The Lead Cybersecurity Analyst partners across the organization to ensure business solutions are designed and operated in compliance with security, privacy, and regulatory requirements, while advancing enterprise security capabilities. The Lead acts with vision in identification and assessment of emerging information security trends and alignment to existing architectures for the betterment of the overall organization. This position assists in information security functions including security configuration, continuous monitoring of centralized information management systems, investigation and response to security incidents, vulnerability management, firewall administration and oversight, identity management, and the administration of global security management systems.  The position will also provide support for security-based control frameworks. Additionally, this role will be heavily involved in cross-functional projects to positively impact the Company and customers, modeling the values and inclusiveness of all employees. 

Essential Duties:

• Analyze security logs and events using SIEM; conduct vulnerability assessments and penetration testing; develop and maintain scripts, routines and software to perform vulnerability threat assessments; investigate and respond to security incidents 
• Participates as a member of the security incident response team and evaluates security incidents, develops solutions and communicates status and outcomes to management
• Conducts technical analysis to determine scope, impact, and root cause of security incidents; coordinate containment and recovery actions; and communicates status and outcomes to management
• Use security monitoring and forensic tools to collect and analyze evidence, document findings, and produce incident reports and post-incident recommendations
• Maintain effectiveness of enterprise security subsystems and controls 
• Provides guidance to junior staff 
• Provide guidance on design, strategy and administration for Active Directory/Group Policy and Microsoft Entra ID (Azure AD), including lifecycle management, privileged access, and policy enforcement 
• Provide design, oversight and administration of customer identity and access management systems 
• Integrate IAM controls with security monitoring, vulnerability management, and change processes 
• Regularly review security best practices to ensure enterprise firewalls are properly administered and hardened, including rule set management, change and configuration management, and timely firmware and software patching
• Apply network security best practices and integrate firewall telemetry with SIEM 
• Review current and proposed architectures, identify design gaps, and recommend security enhancements 
• Evaluate security implications of system changes and ensure secure configurations 
• Perform and review comprehensive risk assessments, including third-party and vendor security
• Contribute to policy and procedure development aligned to frameworks 
• Maintain the enterprise security awareness training program and track control effectiveness 
• Work closely with Cybersecurity leadership and Infrastructure/Operations teams; serve as a security SME 
• Performs other related duties and responsibilities as assigned
• Lead design, strategy and administration for Active Directory/Group Policy and Microsoft Entra ID (Azure AD), including lifecycle management, privileged access, and policy enforcement (Lead Cybersecurity Analyst Only)

Required Knowledge, Skills and Abilities:

• Strategic thinker with strong communication skills and ability to build trust through mutual respect and ongoing communication
• Organized, collaborative problem solver effective in dynamic environments 
• Solid grounding in networking and security best practices 
• Strong working knowledge with COBIT, NIST, or ISO frameworks 
• Project management experience 
• Experience and knowledge base of solutions, trends, and information security systems including: SIEM operations, vulnerability management, MFA/SSO, Active Directory/Group Policy, Microsoft Entra ID (Azure AD) 
• Firewall administration and network security tooling    

Required Education and Experience:

• Bachelor’s degree in Information or Cyber Security, Telecommunications, Engineering, Computer Science, Management Information Systems, or relevant field (equivalent military or work experience can be considered in lieu of formal education) 
• 5+ years in information security, 5+ years in IT, and 3+ years supporting identity environments

• 8+ years in information security, 10+ years in IT, and 7+ years supporting identity environments (Lead Cybersecurity Analyst Only)

• CISSP or equivalent in good standing; any applicant working on their certification will meet this requirement as long as certification is obtained within 1 year of hire date 

Preferred Education and Experience:

• Advanced certifications (e.g., CCIE, CCNP, CCSP, CISM, CRISC, CEH or SANS) 
• Experience in regulated environments and industry audits 
• Understanding of HIPAA/HITECH environments 
• Blue Cross Blue Shield or other health and/or life insurance company experience 
• Experience with Department of Insurance audits 
• Knowledge of the insurance industry regulatory landscape 
• Experience with Microsoft Windows platforms and major cloud platforms 
• Cloud Platform experience with major vendors (Azure and AWS), including PaaS, SaaS, IaaS 
• Knowledge of the following concepts: Firewalls, VPN, IPS, Building Security Systems (cameras, doors, badge scanners), Endpoint protection, Mobile Device Management (MDM), Web proxy and traffic monitoring 

Working Conditions (Physical Demands):

• Normal, no adverse or hazardous conditions
• Occasional evenings/weekends; travel less than 5%

This job description is intended to convey information essential to understanding the scope of the position and its general requirements. It is not exhaustive and may be subject to modification at any time to meet the evolving needs of the organization.