Senior Incident Response Analyst - Remote

Ann & Robert H. Lurie Children's Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design. As the largest pediatric provider in the region with a 140-year legacy of excellence, kids and their families are at the center of all we do. Ann & Robert H. Lurie Children's Hospital of Chicago is ranked in all 10 specialties by the U.S. News & World Report.

General Summary of Position Responsibility:

The Senior Incident Response Analyst helps guide resources to prepare for, coordinate, and respond to incidents, including, but not limited to, computer security vulnerabilities, malware, phishing, and social engineering, as well as associated forensic investigations.

This position utilizes industry-leading security incident response procedures, performing frequent monitoring of incident detection control effectiveness and helping to inform preparedness exercises.

This position effectively collaborates with managed detection and response, incident assistance, and security forensics partners. This position coordinates with internal emergency preparedness teams and contributes to a resilient business continuity posture.

Essential Job Functions:

Area Specific Job Accountabilities:

• Leads security investigations, addresses system detected anomalies, and enacts major incidentavoidance response measures. Formulates thorough and clear investigation documentation.
• Assists with first responder and crisis manager preparedness exercises.
• Provides expert feedback to managed detection and response services, including to securityoperations, incident assistance, and data forensics firms.
• Executes against all aspects of technical security incident response to include assessment, containment, and reporting in collaboration with the Incident Response Manager.
• Serves as a subject matter expert involved in security event monitoring and alerting systemsdesign effectiveness.
• Shared responsibility for improving key performance indicators, such as mean time to detectionand mean time to resolution.
• Continuously reviews incident reporting requirements and data collection methods to ensure efficiency. Collaborates with management and technical teams to collaborate on data collectionand reporting optimization.
• Performs other duties as assigned.

Knowledge, SKILLS, and Abilities:

• Bachelor's degree, preferably in Computer Science or related information security expertise.
• 5+ years of experience in information security incident response required.
• SANS GCIH (GIAC Certified Incident Handler), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Security Auditor) or equivalent certification highly desired.
• Strong knowledge of information security forensics, security operations, security monitoring, technology implementation, risk analysis strategy, and NIST incident response life cycle.
• Experience and knowledge with information security frameworks, regulatory compliance, and regulatory bodies (e.g., HITRUST, NIST, HIPAA, DHHS).
• Goal oriented with the ability to lead team achievements toward desired results utilizing both internal and external resources.
• Professional communication, disciplined documentation, and commitment to following and improving processes and procedures.
• Familiarity and experience with crisis management, disaster recovery, and business availability programs and procedures.

Education

Benefit Statement

For full time and part time employees who work 20 or more hours per week we offer a generous benefits package that includes:

Medical, dental and vision insurance

Employer paid group term life and disability

Employer contribution toward Health Savings Account

Flexible Spending Accounts

Paid Time Off (PTO), Paid Holidays and Paid Parental Leave

403(b) with a 5% employer match

Various voluntary benefits:

• Supplemental Life, AD&D and Disability

• Critical Illness, Accident and Hospital Indemnity coverage

• Tuition assistance

• Student loan servicing and support

• Adoption benefits

• Backup Childcare and Eldercare

• Employee Assistance Program, and other specialized behavioral health services and resources for employees and family members

• Discount on services at Lurie Children's facilities

• Discount purchasing program

There's a Place for You with Us

At Lurie Children's we embrace and celebrate diversity and equity in a serious way. We are committed to building a team with a variety of backgrounds, skills, and viewpoints - recognizing that diverse identities strengthen our workplace and the care we can provide to the Chicago community and beyond. We treat everyone fairly, appreciate differences, and make meaningful connections that foster belonging and allyship. This is a place where you can be your best, so we can give our best to the patients and families who trust us with their care.

Lurie Children's and its affiliatesare equal employment opportunity employers. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin, ancestry, age, disability, marital status, pregnancy, protected veteran status, order of protection status, protected genetic information, or any other characteristic protected by law.

Support email: candidatesupport@luriechildrens.org