Cybersecurity Analyst, Senior

Company Overview

Acentra Health exists to empower better health outcomes through technology, services, and clinical expertise. Our mission is to innovate health solutions that deliver maximum value and impact.

Lead the Way is our rallying cry at Acentra Health. Think of it as an open invitation to embrace the mission of the company; to actively engage in problem‑solving; and to take ownership of your work every day. Acentra Health offers you unparalleled opportunities. In fact, you have all you need to take charge of your career and accelerate better outcomes – making this a great time to join our team of passionate individuals dedicated to being a vital partner for health solutions in the public sector.

Acentra Health is looking for a Sr. Cybersecurity Analyst to join our growing team.

Job Summary:

The Senior Cybersecurity Analyst, as part of a team, will provide tracking and briefing of the security status of cloud service provider systems. Contribute to writing and review of security documentation to security status of cloud products and environments. Meet with Engineers, and System Administrators to review security guidelines. Will perform security audit and compliance tasks for cloud applications. Be part of panel to provide guidance to System Administrators performing remediation activities.

Project management for small projects by running meetings with the customer and vendors in a small team.

Responsibilities:

• Understand, establish, and implement Authority to Operate (ATO) for systems to adhere with FedRAMP High guidelines and the HIPAA rule
• In-depth Knowledge of NIST 800-53 v5 framework to execute security controls and plans
• Serve as liaison between program managers and senior leaders providing technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information. Analyze security posture and vulnerabilities present in cloud architecture systems
• Update and review technical security documentation deliverables such as system security, incident response and contingency plans
• Prepare deliverables for the customer as required by contract
• Assist SIEM with investigations of suspected incidents, complete customer notifications according to contractual obligations

• A Bachelor's degree or higher from a US Department of Education accredited college or university recognized by the corresponding professional associations in an information technology-related field
• An active certification from one of the following:
  Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), CompTIA Security+, Certified Authorization Professional (CAP), or GIAC Security Essentials (GSEC)
• Minimum of 10 years of experience applying information technology security controls
• Minimum of 2 years using federal processes, procedures, and standards in implementing information technology security controls (e.g., National Institute of Standards and Technology (NIST) Special Publications, Federal Information Processing Standards (FIPS), Federal Information Security Modernization Act of 2014 (FISMA), DHS Policy Directive 4300A)
• Knowledgeable with Federal Security Policy Documentation (POA&M, SOP, Contingency Plans, SSP, etc.)
• Providing system-related input on cybersecurity requirements to be included in statements of work and other appropriate procurement documents
• Analyzing and updating security plans, policies, and procedures to ensure they align with cybersecurity laws and regulations and the organization's cyber objectives. Developing
• Related system design to enhance cyber security controls and to reduce vulnerabilities, mitigate risks, and develop remediation plans to harden relevant security systems
• This role requires the candidate to obtain a high‑level US public trust clearance. That clearance requires US citizenship and residency. Furthermore, the individual must have resided in the US for 3 of the last 5 years.
• A public trust security clearance is required to perform on this contract. Failure to achieve and maintain the necessary…