The Senior Cybersecurity Operations (SecOps) Analyst is responsible for advanced monitoring and analysis of the Dartmouth-Hitchcock Health (D-HH) cybersecurity posture. Works together with other D-HH SecOps analysts and the D-HH security operations center (SOC) to prepare for, monitor, detect, prioritize, analyze, respond to and report on cybersecurity incidents. Functions as the senior threat hunter and ensures D-HH threat intelligence is accurate, timely, accessible and integrated into key cybersecurity tools.

1. Maintains, monitors, and analyzes cybersecurity audit logs and events by ensuring that D-HH critical infrastructure audit logging, alerting, and reporting is operational for detection of cybersecurity incidents. Collaborates with SOC analysts to improve visibility into D-HH systems and event correlation capability. Analyzes, classifies and prioritizes event alerts. Triages potential cybersecurity incidents for investigation. Reports incidents per procedures.
2. Responds to cybersecurity incidents. Maintains Incident Response plans, playbooks, and procedures. Conducts and documents complex investigations of cybersecurity breaches and incidents. Assesses impact on the organization and report on findings.
3. Manages threat intelligence by performing advanced threat hunting activities. Collects and analyzes threat intelligence. Correlates threats and vulnerabilities and audits logs to maintain situational awareness. Incorporates threat intelligence into D-HH security tools.
4. Manages enterprise vulnerabilities. Identifies, analyzes, and prioritizes vulnerabilities across the enterprise. Reports on recommended patching and remediation efforts to appropriate parties. Follows escalation procedures as necessary. Performs penetration testing on specific devices and assist third party penetration testing on the D-HH network.
5. Performs system testing for new cybersecurity tools.
6. Handles and triages end-user and customer reported incidents & requests.
7. Performs other duties as required or assigned.

• Bachelor’s Degree in Computer Science, Engineering, Cybersecurity or a related field, or the equivalent in education and experience required.



• Five (5) years of increasing responsibility and experience in Information Technology.



• Demonstrable knowledge, certification, or experience with cybersecurity frameworks, tools, techniques required. Cybersecurity and/or system administration experience is strongly preferred.



• Experience with incident detection, incident response and computer / digital forensic techniques and investigations is strongly preferred.



• Experience with end-user support, security event and audit log management systems, vulnerability scanning and management, basic malware handling and analysis techniques, knowledge of various technical security controls are highly desirable skills.



• Must have solid written and verbal communications skills and be able to work independently.



• Must have a meticulous attention to detail, proven problem-solving skills, work comfortably under pressure and deliver on tight deadlines.



• Familiarity with health care relevant regulatory legislation and standards for the protection of health information and patient privacy (HIPAA, NIST).



• Must be self-directed, flexible, and have excellent organizational, analytical, and interpersonal communication skills.

• Required to possess a Professional Security certification (i.e., CEH, CISSP, CISA, CISM, SANS)