SOC 2 Analyst

Clearwater Security and Compliance LLC is the leading provider of cybersecurity, risk management, and HIPAA compliance software, consulting, and managed services for the healthcare industry.

Our solutions enable organizations to avoid preventable breaches, protect patients and their data, meet regulatory requirements, and optimize cybersecurity investments.

More than 400 healthcare organizations, including 70 of the nation's largest health systems and a large universe of physician groups and digital health companies, trust Clearwater to meet their cybersecurity and compliance needs.

The SOC Level 2 Analyst will be a member of the Managed Security Services Team and will be responsible for handling security tickets and the handling of events that come into the SOC.

The SOC Analyst portion of this role will handle security tickets and events that come into the SOC. SOC Level 2 Analyst must also be able to perform many different tasks within the SOC and mentor other SOC resources to further expand the SOC's capabilities and capacity to grow, with a focus on extending the vulnerability management capabilities within the team.

This position will require shift work outside of normal business hours (8 am - 5 pm) including nights and weekends.

Requirements

• Guide colleagues and participate in troubleshooting client issues and complex problems, utilizing internal knowledgebase and procedures, and independent research, alongside Senior colleagues.
• Monitor and triage cybersecurity incidents
• Analyze security threats for managed services customer networks and endpoints
• Document security incident use cases, help develop and update procedures
• Provide remote support to customers for incident management and response
• Participate in after-hours upgrades, troubleshooting, and on-call availability as needed
• Perform threat hunting based on emerging IOCs or Vulnerabilities
• Generate Vulnerability reports to prioritize remediation of critical and high severity vulnerabilities

Other Duties :

o Remain engaged with technical forums and user groups

o Other relevant tasks as directed by department leadership

Requirements

3 years of working knowledge of networking and security related technologies

QUALIFICATIONS, SKILLS & KNOWLEDGE REQUIREMENTS

• Knowledge of various operating systems including but not limited to Windows, Linux, MacOS
• Demonstrated ability to analyze, triage, and remediate security incidents
• Excellent verbal and written communication skills
• Experience in troubleshooting in a technical environment
• Excellent analytical and problem-solving skills
• Superior customer service skills
• Experience with vulnerability management tools like Nessus, Rapid7 or Qualys
• Active security clearance is a plus but not required.

Have or acquire one or more certifications in the cybersecurity domain including, but not limited to :

• CompTIA Security+, GISF, ISC SSCP, GSEC, ISACA CFC,
• CompTIA PenTest+, OSCP, CEH, GEVA

WORK ENVIRONMENT

• Currently Clearwater is "virtual" company and all colleagues work remotely.
• Work remotely and provide own printer / scanner, computer audio capability, cell phone, Internet service, and Microsoft Office software.
• This position may require occasional travel for training and meetings.?

COMPENSATION & BENEFITS

• Base Salary
• Participation in Company's Medical / RX, Disability, Life / ADD Insurance, and 401K benefit programs
• Flexible Time Off (FTO) vacation policy.
• Clearwater is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race;
• creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status;

veteran, marital, or citizenship status; or any other status protected by law.

If you require a reasonable accommodation to complete an application, interview or otherwise participate in the recruiting process, please direct your inquiries to a recruiter @ 615-669-8896 or jobs@clearwatersecurity.com.

This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.

If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment.

Employers can only use E-Verify once you have accepted a job offer and completed the form I-9.

For more information on E-Verify, or if you believe that your employer has violated its E-Verify responsibilities, please contact DHS. 888-897-7781

Salary Description

75,000-85,000