What you will be doing:
The Cyber Threat Analyst is responsible for monitoring and responding to security events, conducting detailed analyses of security incidents, and assisting in the development of security policies. This role serves as an intermediate step between a Security Operations Analyst and an Associate Information Security Engineer, handling more complex security incidents and providing mentorship to junior analysts.
A more advanced role, but like the Security Operations Analyst, the Cyber Threat Analyst is responsible for activities relating to monitoring and responding to security events. The Cyber Threat Analyst receives, researches, triages and documents all security events and alerts as they are received. This individual supports multiple security-related platforms and technologies, interfacing with others within the IT organization, as well as other internal business units and external customers/partners. Events will be generated from endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third parties and other sources. The Cyber Threat Analyst also receives information sharing and analysis center (ISAC) information and is expected to hunt for potential compromise across the infrastructure.
The Cyber Threat Analyst reports to the Senior Manager Support Services and is an involved member of the SOC team. This role must display an in-depth understanding of current trends and technologies related to IT security and compliance and contribute to the company IT security strategy and roadmap. This role is part of a 24X7 on-call rotation which has strict SLA response commitments.
Key Responsibilities
Responsibility #1 – 70%
Monitoring and Responding to Security Events
Monitor security events from various sources, including endpoints, networks, SIEM systems, and threat intelligence platforms.
Respond to these events promptly and effectively.
Incident Analysis and Investigation
Conduct detailed analyses of security incidents to understand the nature and impact of the threat.
Identify the source and destination IP addresses, assess the impact of the attack, and investigate the attack using internal and external tools.
Documentation and Reporting
Document all security events and incidents thoroughly.
Create incident timelines, record evidence, and prepare detailed reports on findings.
Responsibility #2 – 20%
Recommend enhancements, implement, and manage security tools
Provide feedback around current monitoring and alerting to improve detection and alerting.
Enhance analysis through automation.
Participate in the administration and/or review of access reviews, firewall rule reviews, quarterly web application firewall reviews, and web proxy policy exceptions.
Responsibility #3 – 10%
Reduce downtime and ensure business continuity
Proactively notifying the appropriate stakeholders about serious security events.
Mentorship and Training
Provide guidance and support to junior analysts, helping them develop their skills and knowledge.
Proactive Security Measures
Involved in proactive security measures, such as threat hunting and vulnerability assessments, to identify and mitigate potential threats before they can cause harm.
Required Qualifications
Work Experience:
Years of Applicable Experience - 2 or more yearsEducation:
High School Diploma or GED (Required)
Preferred Qualifications
Skills:
Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP and other network and system monitoring tool
Working knowledge/experience with network systems, security principles, applications and risk and compliance initiatives such as Payment Card Industry (PCI), Health Information Portability and Accountability Ace (HIPAA), Sarbanes-Oxley Act (SOX) and the General Data Protection Regulation (GDPR)
Experience with the following skills: network defense, ethical hacking, incident response, computer forensics, and reverse engineering
Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively
Required participation in 24X7 on-call rotation and availability to assist with issues that arise outside of business hours.
Experience:
3-5 years of information security monitoring and response or related experience desired
Experience with user and entity behavior analytics (UEBA) and security orchestration and automation (SOAR) desired
Education:
Bachelor’s Degree; SANS GCIH or GCIA; Security+, Network+, CISSP a plus
Additional Job Requirements:
Remain in a stationary position for prolonged periods of time
Be adaptive and change priorities quickly; meet deadlines
Attention to detail
Operate computer programs and software
Ability to communicate effectively with audiences in person and in electronic formats.
Day-to-day contact with others (co-workers and/or the public)
Making independent decisions
Ability to work in a collaborative business environment in close quarters with peers and varying interruptions
Qualified full-time and part-time employees also receive access to the following benefits:
Health, dental, vision, life and disability insurance
401k retirement program
Paid time off
Participation in Premier’s employee incentive plans
Tuition reimbursement and professional development opportunities
Premier at a glance:
Ranked #1 on Charlotte’s Healthiest Employers list for 2019, 2020, 2022, and 2023 and 21st Healthiest Employer in America (2023)
Named one of the World’s Most Ethical Companies® by Ethisphere® Institute for the 16th year in a row
Modern Healthcare Best in Business Awards: Consultant - Healthcare Management (2024)
The only company to be recognized by KLAS twice for Overall Healthcare Management Consulting
For a listing of all of our awards, please visit the Awards and Recognition section on our company website.
Employees receive:
Perks and discounts
Access to on-site and online exercise classes
Premier is looking for smart, agile individuals like you to help us transform the healthcare industry. Here you will find critical thinkers who have the freedom to make an impact. Colleagues who share your thirst to learn more and do things better. Teammates committed to improving the health of a nation. See why incredible challenges require incredible people.
Premier is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to unlawful discrimination because of their age, race, color, religion, national origin, ancestry, citizenship status, sex, sexual orientation, gender identity, gender expression, marital status, familial status, pregnancy status, genetic information, status as a victim of domestic violence, covered military or protected veteran status (e.g., status as a Vietnam Era veteran, disabled veteran, special disabled veteran, Armed Forces Serviced Medal veteran, recently separated veteran, or other protected veteran) disability, or any other applicable federal, state or local protected class, trait or status or that of persons with whom an applicant associates. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. In addition, as a federal contractor, Premier complies with government regulations, including affirmative action responsibilities, where they apply. EEO / AA / Disabled / Protected Veteran Employer.
Premier also provides reasonable accommodations to qualified individuals with a disability or those who have a sincerely held religious belief. If you need assistance in the application process, please reply to diversity_and_accommodations@premierinc.com or contact Premier Recruiting at 704.816.5200.
Information collected and processed as part of any job application you choose to submit to Premier is subject to Premier’s Privacy Policy.