Principal IT Cyber Defense Analyst

Job Description:

Oversees the monitoring and analysis of network, endpoint, and database telemetry from tools which

include, but are not limited to: Endpoint Detection and Response (EDR), IDS/IPS, Firewalls, Active

Directory, Windows Event Logs, Vulnerability Management tools

Collaborates with the SOC manager to escalate security issues to other business units including solutions

development, customer hosting and Corporate IT

Independently works with security log tools and event management (SIEM) solutions to create correlation

rules to aid in improved detection

Maintains heightened awareness of current security vulnerabilities, attacks, and mitigation techniques, with

regular and proactive communication to management on findings pertinent to Allscripts environment

Independently identifies security vulnerabilities with high fidelity

Provides consultation to development and operational teams in the appropriate application of security best

practices and the use of advanced security technologies

Provides consultation to operational teams in the tuning of security solutions and ensure their integrity

Independently performs detailed security reviews to ensure design components are being securely

implemented

Participates in the definition and documentation of security standards and best practices

Independently reviews and triages security tickets of junior engineers and events from multiple solutions

5-10 years of experience required.

Excellent troubleshooting skills

Expert knowledge of Linux, Windows, and network forensic evidence concepts

Expert knowledge of the security concerns facing large enterprises

Expert knowledge of security engineering, operations, and design best practices

Very strong analytical skills and problem solving

Very strong knowledge of analyzing and organizing technical data

Very strong organizational skills and high attention to detail

Very strong skill in collecting and analyzing complex data

Maintain knowledge of latest threats

Certifications:

CISSP, CompTIA Security+ or CySA+, GIAC GCIH or GCIA,

product vendor-specific Security technology certificates.

Benefits

Veradigm believes in empowering our associates with the tools and flexibility to bring the best version of themselves to work. Through our generous benefits package with an emphasis on work/life balance, we give our employees the opportunity to allow their careers to flourish.

Quarterly Company-Wide Recharge Days

Flexible Work Environment (Hybrid)

Peer-based incentive “Cheer” awards

Tuition Reimbursement Program

To know more about the benefits and culture at Veradigm, please visit the links mentioned below: -

#LI-SL1 #LI-Hybrid

Veradigm is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse and inclusive workforce.

Thank you for reviewing this opportunity! Does this look like a great match for your skill set? If so, please scroll down and tell us more about yourself!