Cybersecurity Analyst (Oakland)

Cybersecurity Analyst

Asian Health Services, founded in 1974, provides health, social, and advocacy services for all regardless of income, insurance status, immigration status, language, or culture. Our approach to wellbeing focuses on whole patient health, which is why we provide more than primary care services, including mental health, case management, nutrition, and dental care to more than 50,000 patients in English and 15 languages : Korean, Lao, Burmese, Mandarin, Cantonese, Spanish, Portuguese, French, Mien, Karen, Mongolian, Karenni, Tagalog, Khmer, and Vietnamese. We offer medical, dental, and mental health services for all ages.

This position plays a critical role to oversee Cybersecurity processes in a healthcare setting and produce appropriate security response and outcomes which are HIPAA compliant within an overall agency-wide cybersecurity program. Under general direction of the IT Director, the Cybersecurity Analyst is responsible for protecting an organization's computer systems, networks, and data from security breaches and cyber threats. Their role also includes education and overseeing organization-wide cyber related trainings / education, such as monthly phishing campaigns. This role will be based in the IT department and also interact with IS Department regarding technology systems, cybersecurity tools and data with a focus on problem solving, cybersecurity analysis, detection, response and reporting utilizing cybersecurity analysis tools within a context of health information systems and standards, operational objectives, and with a goal of continuously improving AHS' cybersecurity posture. This role collaborates with other disciplines and works at a cybersecurity systems level utilizing one's abilities to problem solve.

Cybersecurity Management

• Conduct security audits.
• Monitor security access to track, document and report security breaches.
• Responsible for conducting cybersecurity-related incident investigations and threat analysis against external threat actors.
• Develop and document IT tactics and procedures to mitigate risk from emerging threats and reduce attack vectors.
• Research, recommend, evaluate, and implement cybersecurity solutions that identify and / or protect against potential threats with multi-departmental teams and cross-discipline expertise utilizing off-the-shelf and custom-built utilities where applicable.
• Resolves complex cybersecurity issues and tracks through internal ticketing and project management systems.
• Create, plan, and implement cybersecurity, incident response, and disaster recovery policies that best fit the organization's environment and capabilities utilizing NIST and CISA guidelines.
• Research and demonstrate new cybersecurity tools for the organization, including functions with AI and automated features.
• Perform system security administration on designated technology platforms, including operating systems, applications, and network security devices, under defined policies, standards, and procedures of the organization, as well as with industry best practices and vendor guidelines.
• Evaluate scans, logs, and alerts from various sources such as Microsoft 365, Barracuda Email Gateway KnowBe4, and SentinelOne to pinpoint key critical vulnerabilities and apply corrective actions.
• Collaborate with relevant contractors and other internal and external stakeholders.
• Other duties as assigned by supervisor.

Communication

User Training

Administrative Duties

General Agency / AHS Duties

Minimum Qualifications

Preferred Qualifications

$110,000 - $125,000 a year.

Benefits : Medical, Dental & Vision premiums 100% paid by AHS. Acupuncture & Chiropractic coverage. 12 Vacation Days. 12 Sick Days. 12 Holidays + 3 Floating Holidays. 3% 403(b) Employer Contribution + up to 2% Employee Match. Commuter Benefits. Flexible Spending Account (FSA) & Dependent Care Assistance. Long-Term Disability Insurance.