Principal IT Cyber Defense Analyst

Job Description:

Oversees the monitoring and analysis of network, endpoint, and database telemetry from tools which

include, but are not limited to: Endpoint Detection and Response (EDR), IDS/IPS, Firewalls, Active

Directory, Windows Event Logs, Vulnerability Management tools

• Collaborates with the SOC manager to escalate security issues to other business units including solutions development, customer hosting and Corporate IT
• Independently works with security log tools and event management (SIEM) solutions to create correlation rules to aid in improved detection
• Maintains heightened awareness of current security vulnerabilities, attacks, and mitigation techniques, with regular and proactive communication to management on findings pertinent to Allscripts environment
• Independently identifies security vulnerabilities with high fidelity
• Provides consultation to development and operational teams in the appropriate application of security best practices and the use of advanced security technologies
• Provides consultation to operational teams in the tuning of security solutions and ensure their integrity
• Independently performs detailed security reviews to ensure design components are being securely implemented
• Participates in the definition and documentation of security standards and best practices
• Independently reviews and triages security tickets of junior engineers and events from multiple solutions

• 5-10 years of experience required.

Excellent troubleshooting skills

• Expert knowledge of Linux, Windows, and network forensic evidence concepts
• Expert knowledge of the security concerns facing large enterprises
• Expert knowledge of security engineering, operations, and design best practices
• Very strong analytical skills and problem solving
• Very strong knowledge of analyzing and organizing technical data
• Very strong organizational skills and high attention to detail
• Very strong skill in collecting and analyzing complex data
• Maintain knowledge of latest threats

Certifications:

CISSP, CompTIA Security+ or CySA+, GIAC GCIH or GCIA,

product vendor-specific Security technology certificates.

Benefits

Veradigm believes in empowering our associates with the tools and flexibility to bring the best version of themselves to work. Through our generous benefits package with an emphasis on work/life balance, we give our employees the opportunity to allow their careers to flourish.

• Quarterly Company-Wide Recharge Days

• Flexible Work Environment (Hybrid)

• Peer-based incentive “Cheer” awards

• Tuition Reimbursement Program

To know more about the benefits and culture at Veradigm, please visit the links mentioned below: -

https://veradigm.com/about-veradigm/careers/benefits/

https://veradigm.com/about-veradigm/careers/culture/

#LI-SL1 #LI-Hybrid

Veradigm is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse and inclusive workforce.

Thank you for reviewing this opportunity! Does this look like a great match for your skill set? If so, please scroll down and tell us more about yourself!