Senior Risk Analyst Jobs in Redlands, CA (NOW HIRING)

Find joy in serving others with IEHP! We welcome you to join us in “healing and inspiring the human spirit” and to pivot from a “job” opportunity to an authentic experience!

Reporting to the Manager, Information Security Operations, the Engineer III – Security Analyst services as a senior cybersecurity practitioner and consultant, advancing the organization’s defensive posture across on-premises and cloud environments. This position maintains and improves security policies, standards, procedures, and response playbooks; produces clear incident documentation, root-cause analyses, and after-action review; and collaborates with business stakeholders to align security controls with organizational requirements. The Engineer III - Security Analyst mentors team members, evaluates emerging technologies, and champions continues improvement to mature security operations and ensure best practices. This position provides guidance to business units and technology stakeholders during the deployment of critical business and technology initiatives utilizing deep understanding of global threat actors and their tactics, techniques, and procedures employed during cyberattacks. This position supports various Information Technology Security functional areas related to one or more of the following: Application Security, Security Operations and Vulnerability.

Commitment to Quality: The IEHP Team is committed to incorporate IEHP’s Quality Program goals including, but not limited to, HEDIS, CAHPS, and NCQA Accreditation.

IEHP is not only committed to healing and inspiring the human spirit of our Members, but we also aim to match our team members with the same energy by providing prime benefits and more.

• Competitive salary
• State of the art fitness center on-site
• Medical Insurance with Dental and Vision
• Life, short-term, and long-term disability options
• Career advancement opportunities and professional development
• Wellness programs that promote a healthy work-life balance
• Flexible Spending Account – Health Care/Childcare
• CalPERS retirement
• 457(b) option with a contribution match
• Paid life insurance for employees
• Pet care insurance

• A minimum of eight (8) years of IT experience required with at least five (5) years in a cybersecurity role with a focus on protect, detect, and respond in addition to the following:
• Mitre ATT&CK and Cyber Kill Chain frameworks
• Establishing or participating in Blue Team exercises
• Computer operating systems such as Windows, MacOS and Linux
• System development lifecycle
• Deploying, managing, and using Security Operations tools such as SIEM, EPM, DLP, Vulnerability Management, Firewalls, WAFs, Antivirus Solutions, Email Protection Solutions, Incident Response and Threat hunting and management
• Scripting experience such as PowerShell, JavaScript, or Python
• Experience working with Identity and Access Control Management Tools
• Associate’s degree with a major in computer-related field or similar technical field from an accredited institution required
• In lieu of the required degree, a minimum of two (2) years of cybersecurity work experience is required
• This experience is in addition to the minimum years listed in the Experience Requirements above
• Relevant security certifications preferred

• Comprehensive knowledge and deep understanding of the following:
  • SIEM and SOAR
  • ATT&CK and Cyber Kill Chain frameworks
  • Blue Teaming
  • Endpoint protection technologies
  • Cloud technologies
  • OSI Model layers, IP Routing, TCP/IP Operation
  • Scripting experience such as PowerShell, JavaScript, or Python
  • Computer forensics knowledge and experience
  • Security standards such as HIPAA, NIST 800-53, NIST CSF, Zero Trust Architecture, and others
  • Vulnerability scanning technologies
  • Security monitoring and incident response
  • Risk analysis and risk mitigation strategies
  • Networking technologies and networking protocols with an emphasis on TCP/IP
  • Defense in Depth strategies
  • Security Operations Tools such as SIEM, EPM, DLP, Vulnerability scanners, Firewalls, WAFs, Antivirus Solutions, Email Protection Solutions, Incident Response and Threat Management
  • Advanced Persistent Threats (APT) and associated tactics
  • Identifying indicators of compromise and indicators of attack
  • Vulnerability management
  • Cloud security and/or technologies
  • Computer operating systems such as Windows, MacOS and Linux
• Strong planning, organization, critical thinking, decision-making and communication (verbal and written) skills
• Proven ability to:
  • Work as a member of a team
  • Show willingness to be flexible and adaptable to change in a dynamic work environment
  • Contribute and participate in team activities and planning regarding improving team skills, awareness, communication, reputation, and quality of work
  • Learn and apply new concepts
  • Work within a team to consistently learn and share advanced skills and foster team excellence
  • Stay up to date with current knowledge of industry trends and standards.
• Projects involving lift server appliance weights up to 50 lbs.; back brace must be worn with lifting 50 pounds or heavier