Post job

Cyber security analyst jobs in Decatur, IL - 26 jobs

All
Cyber Security Analyst
Security Engineer
Securities Analyst
Information Security Engineer
Cyber Security Engineer
Defense Analyst
Senior Security Engineer
Information Security Officer
  • Cyber Defense Forensics Analyst

    EY 4.7company rating

    Cyber security analyst job in Springfield, IL

    At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better. Join us and build an exceptional experience for yourself, and a better working world for all. The exceptional EY experience. It's yours to build. EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. Today's world is fuelled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 950 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team helps protect the EY brand and build client trust. Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through innovative, secure solutions that provide speed to market and business value. **The opportunity** Cyber Triage and Forensics (CTF) Incident Analyst will work as a senior member of the technical team responsible for security incident response for EY. The candidate will work as an escalation point for suspect or confirmed security incidents. Responsibilities include performing digital forensic analysis, following security incident response standard methodologies, malware analysis, identify indicators of compromise, support remediation or coordinate remediation efforts of a security incident, and develop documentation to support the security incident response process. **Your key responsibilities** + Investigate, coordinate, bring to resolution, and report on security incidents as they are brought up or identified + Forensically analyze end user systems and servers found to have possible indicators of compromise + Analysis of artifacts collected during a security incident/forensic analysis + Identify security incidents through 'Hunting' operations within a SIEM and other relevant tools + Interface and connect with server owners, system custodians, and IT contacts to pursue security incident response activities, including: obtaining access to systems, digital artifact collection, and containment and/or remediation actions + Provide consultation and assessment on perceived security threats + Maintain, manage, improve and update security incident process and protocol documentation + Regularly provide reporting and metrics on case work + Resolution of security incidents by identifying root cause and solutions + Analyze findings in investigative matters, and develop fact based reports + Be on-call to deliver global incident response **Skills and attributes for success** + Resolution of security incidents by identifying root cause and solutions + Analyze findings in investigative matters, and develop fact-based reports + Proven integrity and judgment within a professional environment + Ability to appropriately balance work/personal priorities **To qualify for the role you must have** + Bachelors or Masters Degree in Computer Science, Information Systems, Engineering or a related field + 5+ years experience in incident response, computer forensics analysis and/or malware reverse engineering; + Understanding of security threats, vulnerabilities, and incident response; + Understanding of electronic investigation, forensic tools, and methodologies, including: log correlation and analysis, forensically handling electronic data, knowledge of the computer security investigative processes, malware identification and analysis; + Be familiar with legalities surrounding electronic discovery and analysis; + Experience with SIEM technologies (i.e. Splunk); + Deep understanding of both Windows and Unix/Linux based operating systems; **Ideally, you'll also have** + Hold or be willing to pursue related professional certifications such as GCFE, GCFA or GCIH + Background in security incident response in Cloud-based environments, such as Azure + Programming skills in PowerShell, Python and/or C/C++ Understanding of the best security practices for network architecture and server configuration **What we look for** + Demonstrated integrity in a professional environment + Ability to work independently + Have a global mind-set for working with different cultures and backgrounds + Knowledgeable in business industry standard security incident response process, procedures, and life cycle + Excellent teaming skills + Excellent social, communication, and writing skills **What we offer you** The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary range/s. At EY, we'll develop you with future-focused skills and equip you with world-class experiences. We'll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more . We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $87,700 to $164,000. The salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $105,200 to $186,400. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you'll decide how much vacation time you need based on your own personal circumstances. You'll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being. **Are you ready to shape your future with confidence? Apply today.** EY accepts applications for this position on an on-going basis. For those living in California, please click here for additional information. EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. **EY | Building a better working world** EY is building a better working world by creating new value for clients, people, society, and the planet, while building trust in capital markets. Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow. EY teams work across a full spectrum of services in assurance, consulting, tax, strategy, and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories. EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY's Talent Shared Services Team (TSS) or email the TSS at ************************** .
    $105.2k-186.4k yearly 60d+ ago
  • Job icon imageJob icon image 2

    Looking for a job?

    Let Zippia find it for you.

  • Senior Cyber Security Engineer

    Addison Group 4.6company rating

    Cyber security analyst job in Mattoon, IL

    Job Description Title: Senior Cyber Security Engineer Salary: $110-120K + Bonus Job Type: Full-Time | Exempt is eligible for medical, dental, vision, 401(k), and PTO. No sponsorship available Senior Cyber Security Engineer, you'll drive vision and direction for the security posture while supervising a small team of Security Analysts. You'll architect and operate a Cisco-centered security stack, champion Zero Trust principles, mature identity as the new perimeter, and drive continuous improvement through automation and measurable risk reduction. You'll partner across infrastructure, applications, and business stakeholders to communicate risk clearly and deliver pragmatic, timely risk mitigation. Coach, prioritize work, set goals, and create growth paths for a small team of Security Analysts; define on-call and incident roles. Design/operate Cisco Secure Firewall (Firepower/FMC), ISE (802.1X/NAC), Duo MFA, Umbrella (DNS-layer/SIG), Secure Client/AnyConnect, and email security solutions. Design policy, segmentation, and monitoring across HQ, DCs, and stores. Design and implement a Zero-Trust Architecture (ZTA), including least privilege, continuous verification, strong device and user trust signals, and micro-segmentation. Assist in guiding enterprise IAM with Entra ID/Azure AD; govern SSO/MFA (DUO), SCIM lifecycle, RBAC, privileged access. Support external partners for MDS/SIEM, coordinate red/blue activities, and run incident response end-to-end. Own vulnerability intake, risk scoring, SLAs, and remediation tracking. Support PCI and other retail/security obligations; maintain policies/standards, evidence, and control testing; partner with Internal Audit and external assessors. Drive patching, endpoint/server hardening, secure configs (CIS/NIST), EDR, and tabletop exercises. Deliver clear, audience-appropriate updates to executives and cross-functional teams; publish playbooks, runbooks, and metrics dashboards that show risk reduction and program maturity. Use discretion and independent judgment in daily decisions while maintaining high confidentiality and professionalism. Actively participate in learning initiatives such as training programs, workshops, and webinars. Leverage these opportunities to acquire new knowledge, refine existing skills, and stay current on the latest developments. Provide friendly, proactive, and professional internal and external support to others, assisting with inquiries, concerns, and issues promptly and effectively. Essential Qualities for Success 10+ years of hands-on cybersecurity/IT security engineering, plus 2+ years leading or supervising security teams. Bachelor's degree in a relevant field (or equivalent experience). CISSP, CISM, CCNP Security, and Cisco ISE/Duo/Umbrella certifications preferred. Demonstrated Zero Trust design and implementation across identity, device, network, and application layers. Working knowledge of NIST CSF/800-53, CIS Controls, and PCI DSS; risk assessment and control design experience. Proficiency with Microsoft Office Suite or related software. Working knowledge of Microsoft Office Suite. Comfortable navigating computer systems and software to assist customers or manage activities. Excellent verbal and written interpersonal and communication skills Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request.
    $79k-104k yearly est. 29d ago
  • Senior Cyber Security Engineer

    Rural King 4.0company rating

    Cyber security analyst job in Mattoon, IL

    About us Rural King is America's Farm and Home Store, providing essentials to the communities we serve. With a wide array of necessities ranging from food and feed to farm and home products, Rural King serves over 130 locations across 13 states and is constantly expanding. Our annual sales exceed $2.5 Billion, and our heart beats in Mattoon, IL, home to our corporate office, distribution center, and flagship store. One thing our customers appreciate is our unique shopping experience, complete with complimentary popcorn and coffee. It's just one way we show our appreciation for their support. At Rural King, we value our associates and strive to create a positive, rewarding workplace. We offer growth opportunities, competitive benefits, and a people-first environment where dedicated individuals come together to serve rural communities passionately. Join us, and you'll find not just a job but a chance to grow professionally, contribute meaningfully, and make a difference in the lives of those we serve. How we reward you 401(k) plan that provides a 100% match on the first 3% of your contributions and 50% of the next 2% Healthcare plans to support your needs Virtual doctor visits Access to Centers of Excellence with Barnes Jewish Hospital and Mayo Clinic's Complex Care Program 15% Associate Discount Dave Ramsey's SmartDollar Program Associate Assistance Program RK Cares Associate Hardship Program 24/7 Chaplaincy Services Company paid YMCA Family Membership What You'll Do As the Senior Cyber Security Engineer, you'll drive vision and direction for Rural King's security posture while supervising a small team of Security Analysts. You'll architect and operate a Cisco-centered security stack, champion Zero Trust principles, mature identity as the new perimeter, and drive continuous improvement through automation and measurable risk reduction. You'll partner across infrastructure, applications, and business stakeholders to communicate risk clearly and deliver pragmatic, timely risk mitigation. * Coach, prioritize work, set goals, and create growth paths for a small team of Security Analysts; define on-call and incident roles. * Design/operate Cisco Secure Firewall (Firepower/FMC), ISE (802.1X/NAC), Duo MFA, Umbrella (DNS-layer/SIG), Secure Client/AnyConnect, and email security solutions. * Design policy, segmentation, and monitoring across HQ, DCs, and stores. * Design and implement a Zero-Trust Architecture (ZTA), including least privilege, continuous verification, strong device and user trust signals, and micro-segmentation. * Assist in guiding enterprise IAM with Entra ID/Azure AD; govern SSO/MFA (DUO), SCIM lifecycle, RBAC, privileged access. * Support external partners for MDS/SIEM, coordinate red/blue activities, and run incident response end-to-end. * Own vulnerability intake, risk scoring, SLAs, and remediation tracking. * Support PCI and other retail/security obligations; maintain policies/standards, evidence, and control testing; partner with Internal Audit and external assessors. * Drive patching, endpoint/server hardening, secure configs (CIS/NIST), EDR, and tabletop exercises. * Deliver clear, audience-appropriate updates to executives and cross-functional teams; publish playbooks, runbooks, and metrics dashboards that show risk reduction and program maturity. * Use discretion and independent judgment in daily decisions while maintaining high confidentiality and professionalism. * Actively participate in learning initiatives such as training programs, workshops, and webinars. Leverage these opportunities to acquire new knowledge, refine existing skills, and stay current on the latest developments. * Provide friendly, proactive, and professional internal and external support to others, assisting with inquiries, concerns, and issues promptly and effectively. * Demonstrate behaviors that exemplify Rural King's Values: People First, Integrity, Attitude, Initiative, Teamwork, Accountability, and Continuous Improvement. * Perform other duties as assigned. Supervisory Responsibilities Yes Essential Qualities for Success * 10+ years of hands-on cybersecurity/IT security engineering, plus 2+ years leading or supervising security teams. * Bachelor's degree in a relevant field (or equivalent experience). * CISSP, CISM, CCNP Security, and Cisco ISE/Duo/Umbrella certifications preferred. * Demonstrated Zero Trust design and implementation across identity, device, network, and application layers. * Working knowledge of NIST CSF/800-53, CIS Controls, and PCI DSS; risk assessment and control design experience. * Proficiency with Microsoft Office Suite or related software. * Working knowledge of Microsoft Office Suite. * Comfortable navigating computer systems and software to assist customers or manage activities. * Excellent verbal and written interpersonal and communication skills Physical Requirements * Ability to maintain a seated or standing position for extended durations. * Prolonged periods working at a computer. * Occasional travel to stores/DCs as needed for deployments, audits, or incidents. * Capability to lift 15 pounds periodically. * Ability to navigate and access all facilities. * Close vision for computer-related activities. Reasonable accommodations may be made to enable individuals with disabilities to perform essential job functions. The pay range for this position is $115,000 - $120,000 annualized and is bonus eligible. Exact compensation is determined by factors such as relevant geographic location, education, certifications, experience, job level, shift, and organizational needs. To learn more about our benefits, review here ************************************************************************************ Responsibilities What You'll Do As the Senior Cyber Security Engineer, you'll drive vision and direction for Rural King's security posture while supervising a small team of Security Analysts. You'll architect and operate a Cisco-centered security stack, champion Zero Trust principles, mature identity as the new perimeter, and drive continuous improvement through automation and measurable risk reduction. You'll partner across infrastructure, applications, and business stakeholders to communicate risk clearly and deliver pragmatic, timely risk mitigation. - Coach, prioritize work, set goals, and create growth paths for a small team of Security Analysts; define on-call and incident roles. - Design/operate Cisco Secure Firewall (Firepower/FMC), ISE (802.1X/NAC), Duo MFA, Umbrella (DNS-layer/SIG), Secure Client/AnyConnect, and email security solutions. - Design policy, segmentation, and monitoring across HQ, DCs, and stores. - Design and implement a Zero-Trust Architecture (ZTA), including least privilege, continuous verification, strong device and user trust signals, and micro-segmentation. - Assist in guiding enterprise IAM with Entra ID/Azure AD; govern SSO/MFA (DUO), SCIM lifecycle, RBAC, privileged access. - Support external partners for MDS/SIEM, coordinate red/blue activities, and run incident response end-to-end. - Own vulnerability intake, risk scoring, SLAs, and remediation tracking. - Support PCI and other retail/security obligations; maintain policies/standards, evidence, and control testing; partner with Internal Audit and external assessors. - Drive patching, endpoint/server hardening, secure configs (CIS/NIST), EDR, and tabletop exercises. - Deliver clear, audience-appropriate updates to executives and cross-functional teams; publish playbooks, runbooks, and metrics dashboards that show risk reduction and program maturity. - Use discretion and independent judgment in daily decisions while maintaining high confidentiality and professionalism. - Actively participate in learning initiatives such as training programs, workshops, and webinars. Leverage these opportunities to acquire new knowledge, refine existing skills, and stay current on the latest developments. - Provide friendly, proactive, and professional internal and external support to others, assisting with inquiries, concerns, and issues promptly and effectively. - Demonstrate behaviors that exemplify Rural King's Values: People First, Integrity, Attitude, Initiative, Teamwork, Accountability, and Continuous Improvement. - Perform other duties as assigned. Supervisory Responsibilities Yes
    $115k-120k yearly Auto-Apply 60d+ ago
  • Product Security Engineer, AI

    Meta 4.8company rating

    Cyber security analyst job in Springfield, IL

    Meta's Product Security team is seeking a experienced hacker who derives purpose in life by revealing potential weaknesses and then crafting creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over two billion people. You will be relied upon to provide engineering and product teams with the web, mobile, or native code security expertise necessary to make informed product decisions. Come help us make life hard for the bad guys. **Required Skills:** Product Security Engineer, AI Responsibilities: 1. Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more 2. Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities 3. Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products **Minimum Qualifications:** Minimum Qualifications: 4. BS or MS in Computer Science or a related field, or equivalent experience 5. 8+ years of experience finding vulnerabilities in interpreted languages. Knowledge of best practice secure code development 6. Experience with exploiting common security vulnerabilities 7. Knowledge of common exploit mitigations and how they work 8. Coding and scripting experience in one or more general purpose languages **Preferred Qualifications:** Preferred Qualifications: 9. Experience creating software that enables security processes, especially those leveraging AI/ML for automation or augmentation 10. Experience integrating or building AI-powered tools to assist with vulnerability detection, code review, or threat modeling 11. Experience creating software that enables security processes 12. 8+ years of experience finding vulnerabilities in C/C++ code 13. Contributions to the security community (public research, blogging, presentations, bug bounty) 14. Demonstrated ability to collaborate with AI researchers or engineers to apply AI in security workflows **Public Compensation:** $184,000/year to $257,000/year + bonus + equity + benefits **Industry:** Internet **Equal Opportunity:** Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment. Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
    $184k-257k yearly 60d+ ago
  • Principal Security Engineer

    Oracle 4.6company rating

    Cyber security analyst job in Springfield, IL

    Develops and executes programs and processes to reduce information security risk and strengthen Oracle's security posture. **Responsibilities** Supports the strengthening of Oracle's security posture, focusing on one or more of the following: risk management; regulatory compliance; threat and vulnerability management; incident management and response; security policy development and enforcement; privacy; information security education, training and awareness (ISETA); digital forensics and similar focus areas. Risk Management: Brings advanced level skills to assess the information security risk associated with existing and proposed business operational programs, systems, applications, practices and procedures in very complex, business-critical environments. May conduct and document very complex information security risk assessments. May assist in the creation and implementation of security solutions and programs. Regulatory Compliance: Brings advanced level skills to manage programs to establish, document and track compliance to industry and government standards and regulations, e.g. ISO-27001, PCI-DSS, HIPAA, FedRAMP, GDPR, etc. Researches and interprets current and pending governmental laws and regulations, industry standards and customer and vendor contracts to communicate compliance requirements to the business. Participates in industry forums monitoring developments in regulatory compliance. Threat and Vulnerability Management: Brings advanced level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required. Incident Management and response: Brings advanced level skills to respond to security events, identifying possible intrusions and responding in line with Oracle incident response playbooks. May operate as Incident Commander on serious incidents. Digital Forensics: Brings advanced level skills to conduct data collection, preservation and forensic analysis of digital media independently, where an advanced understanding of forensic techniques is required. Other areas of focus may include duties providing advanced level skills and knowledge to manage Information Security Education, Training and Awareness programs. In a Corporate Security role, may manage the creation, review and approval of corporate information security policies. Mentors and trains other team members. Compiles information and reports for management. Disclaimer: **Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.** **Range and benefit information provided in this posting are specific to the stated locations only** US: Hiring Range in USD from: $104,200 to $223,400 per annum. May be eligible for bonus and equity. Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. Oracle US offers a comprehensive benefits package which includes the following: 1. Medical, dental, and vision insurance, including expert medical opinion 2. Short term disability and long term disability 3. Life insurance and AD&D 4. Supplemental life insurance (Employee/Spouse/Child) 5. Health care and dependent care Flexible Spending Accounts 6. Pre-tax commuter and parking benefits 7. 401(k) Savings and Investment Plan with company match 8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. 9. 11 paid holidays 10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. 11. Paid parental leave 12. Adoption assistance 13. Employee Stock Purchase Plan 14. Financial planning and group legal 15. Voluntary benefits including auto, homeowner and pet insurance The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted. Career Level - IC4 **About Us** As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's challenges. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity. We know that true innovation starts when everyone is empowered to contribute. That's why we're committed to growing an inclusive workforce that promotes opportunities for all. Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_************* or by calling *************** in the United States. Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
    $104.2k-223.4k yearly 3d ago
  • Infrastructure Security Analyst

    Tekwissen 3.9company rating

    Cyber security analyst job in Bloomington, IL

    Required: · Must Have: Citrix Netscaler support and configuration · Significant experience in supporting network security devices such as firewalls and proxies with emphasis on remote access technologies such as VPN and Citrix Netscaler · Significant experience in TCP/IP networking, including network design and troubleshooting. · 1 to 2 years experience in network sniffers and packet analysis. · 1 to 2 years experience in general security. Desired Skills: · Some experience in scripting languages such as Shell and Perl. · Strong customer service and results focus. · Strong organizational, communication, and interpersonal skills. · Strong problem resolution and decision making skills. · Working both independently and in a team environment. · Ability to handle competing priorities. · Able to consult other Business areas. · Sound decision-making ability regarding matters of moderate to high complexity and importance. · Strong analytical and problem-solving skills to solve complex problems logically and systematically · Self-motivated; Ability to work independently on matters of moderate to high complexity and importance with only broad direction. · High technical aptitude. · Security and/or Network Certification is a plus, especially CISSP Additional Information All your information will be kept confidential according to EEO guidelines.
    $70k-93k yearly est. 18h ago
  • EPIC SECURITY ANALYST II

    Taylorville Memorial Hospital

    Cyber security analyst job in Springfield, IL

    Min USD $37.43/Hr. Max USD $58.02/Hr. The Epic Security Analyst II is responsible for managing user access, security policies, and role-based permissions within the Epic electronic health record (EHR) system. This role ensures compliance with HIPAA, organizational security policies, and Epic best practices while supporting security design, audits, and troubleshooting access-related issues. The analyst collaborates with IT teams, Compliance Officers, Privacy, Information Security and Epic application analysts to maintain secure, efficient, and compliant system access. Please note this is a hybrid position with a set scheduled 3 days (Tues - Thurs) per month onsite in Springfield, IL. Travel expenses are covered per our company guidelines for non-local employees. We are happy to offer the flexibility of a hybrid position with some remote/ at home flexibility. Please note you must reside on one of our approved states in order to be considered: Illinois, Indiana, Kansas, Kentucky, Michigan, Missouri, Ohio, and Wisconsin are the approved states. Qualifications Minimum Qualifications:Educational Background: Bachelor's degree in computer science, Information Systems, Healthcare Informatics, or a related field is preferred.Epic Certification: Certification in Epic Security is required within 1 year of hire date. * Three plus years of IT experience desired.• Experience with EMP, SER, and identity management is preferred.• Experience with user provisioning, role-based access control (RBAC), and security model design is preferred.• Understanding of HIPAA, HITECH, and other healthcare security regulations.• Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication (MFA), and identity management solutions.• Strong analytical, problem-solving, and troubleshooting skills related to Epic security and access issues.• Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users. Responsibilities Principle Duties & Responsibilities:1. Manage user access, templates, and security roles within Epic.2. Maintain and configure EMP records, SER security, and role-based access to align with job functions.3. Implement security best practices to protect patient data and comply with regulatory requirements.4. Conduct regular security audits and access reviews to ensure compliance with HIPAA and organizational policies.5. Work with compliance teams and auditors to address security risks and findings.6. Monitor system logs and security reports to detect and respond to unauthorized access or security breaches.7. Troubleshoot access issues, security permissions, and authentication problems within Epic.8. Provide user support, training, and documentation on security policies and access management.9. Assist in resolving user provisioning errors, break the glass access events, and role conflicts.10. Work with IT teams to integrate Active Directory, single sign-on (SSO), and identity management systems with Epic security.11. Coordinate with Epic application analysts and clinical departments to define appropriate security roles.12. Participate in Epic upgrades, security patches, and system maintenance to ensure ongoing security.13. Develop and maintain Epic security policies, procedures, and documentation.14. Identify opportunities for automation, process improvement, and enhanced security measures.15. Stay up to date with Epic security updates, best practices, and regulatory changes. The intent of this job description is to provide a representative summary of the major duties and responsibilities performed by incumbents of this job. Incumbents may be requested to perform tasks other than those specifically presented in this description.
    $37.4-58 hourly Auto-Apply 21d ago
  • Engineer, Information Security and Risk

    Cardinal Health 4.4company rating

    Cyber security analyst job in Springfield, IL

    Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500. **_Department Overview:_** **Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. **Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments. We are seeking a highly skilled and experienced Identity and Access Management (IAM) Engineer to join our team. In this pivotal role, you will be instrumental in designing, implementing, and managing IAM solutions that secure our enterprise applications and facilitate the secure, efficient, and seamless integration of identity and access systems in context of our rapid growth through Mergers and Acquisitions. You will ensure robust access controls, streamline user experiences, and maintain operational continuity across our diverse IT landscape. The ideal candidate will have deep technical expertise in modern IAM principles, protocols and products along with strong management and communication skills. **Responsibilities:** + **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning. + **M&A Integration Strategy & Execution:** Lead the planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions. + **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure. + **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions. + **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC) frameworks. + **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information. + **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration. + **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders. + **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends. **Qualifications:** + **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience. + **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred. + **Technical Expertise:** + Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP). + Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA, and privileged access management (PAM). + Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint). + Experience with scripting languages (e.g., PowerShell, Python) for automation and integration. + Strong understanding of security principles, risk management, and access control models (e.g., RBAC). + Understanding of DevOps practices. + Familiarity with Zero Trust architecture principles. + Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context. + **M&A Specific Skills:** Proven track record of managing complex integration projects, including assessing existing IAM capabilities, workflow, systems, and processes of acquired entities. Ability to navigate the complexities of integrating diverse identity infrastructures. + Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders. + Detail-oriented mindset to ensure precise access control configurations and compliance. + Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements + Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform. + Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment. + Adaptability to stay ahead of evolving IAM technologies and security threats. **Anticipated salary range:** $94,900 - $135,600 **Bonus eligible:** No **Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being. + Medical, dental and vision coverage + Paid time off plan + Health savings account (HSA) + 401k savings plan + Access to wages before pay day with my FlexPay + Flexible spending accounts (FSAs) + Short- and long-term disability coverage + Work-Life resources + Paid parental leave + Healthy lifestyle programs **Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity. _Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._ _Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._ _To read and review this privacy notice click_ here (***************************************************************************************************************************
    $94.9k-135.6k yearly 52d ago
  • Security Analyst- Tivoli (2016-166495)

    Mindlance 4.6company rating

    Cyber security analyst job in Bloomington, IL

    Mindlance is a national recruiting company which partners with many of the leading employers in the Life Sciences, IT, and Financial Services sectors, feel free to check us out at ************************* Job Description Client: NTT DATA / State Farm Job Title: Security Analyst- Tivoli Job ID: 2016-166495 Start Date: 4/21/2016 End Date: 12/31/2016 Location:Bloomington, IL, US Qualifications: Client is seeking a Tivoli Federated Identity Manager Analyst to be responsible for the planning, designing, customizing, testing, troubleshooting, and documenting of solutions for Tivoli Federated Identity Manager V6.1. This individual is expected to perform these tasks with limited assistance from peers, product documentation, and support resources. Support will require availability 24/7. Required Skills/Experience: - Working knowledge/experience: Basic editors such as vi, WebSphere Application Server (administration console, clustering), IBM Tivoli Directory Integrator and JavaScript, IBM Tivoli Access Manager for e-business, F-SSO protocols (SAML, WS Federation, Liberty) - Working knowledge/experience: Operating systems, Server hardware and networking technologies, System administration of UNIX , Windows, or Linux operating systems, XML terms and concepts including XSLT, XML DSig, and XML encryption, SOAP terms and concepts including WS Security, WS Trust, WSDL, Web service deployment, LDAP (IBM Tivoli Directory Server) - Have programming and scripting experience including JSP™, ActiveX , Java - Have experience and knowledge with TCP/IP networking principles including SSL - Have general knowledge of security concepts including key management and PKI (Public Key Infrastructure) fundamentals. - Understand basic Web page development fundamentals (including security issues) Job Responsibilities: - Review customer's architecture and solution design documentation - Analyze the deployment environments - Assist in project plan development - Apply federation management concepts (federated identity management, Web services security management, federated provisioning) - Perform basic installations of the prerequisite applications (IBM Tivoli Directory Integrator, LDAP/DB2 , WebSphere Application Server, Tivoli Access Manager for e-business) - Understand concepts regarding the Tivoli Federated Identity Manager features and components - Configure product and component integration points such as WebSphere Application Server and Tivoli Access Manager for e-business - Install and configure federated single sign-on (F-SSO), Web services security management, and federated provisioning services - Troubleshoot Tivoli Federated Identity Manager services Required Qualifications/Experience Qualification Experience with IBM Tivoli Directory Integrator, IBM Tivoli Access Manager for e-business, IBM Tivoli Directory Server Minimum Years Required 3 Qualification Experience with WebSphere Application Server (administration console, clustering), F-SSO protocols (SAML, WS Federation, Liberty) Minimum Years Required 3 Qualification Experience in System administration of UNIX , Windows, or Linux operating systems Minimum Years Required 2 Qualification Experience with XML terms and concepts including XSLT, XML DSig, and XML encryption, SOAP terms and concepts including WS Security Minimum Years Required 2 Qualification 2 years / Experience in programming and scripting in JSP™, ActiveX , Java Minimum Years Required 2 Additional Information Note: This is an urgent requirement with one of our client, the hiring manager is actively interviewing candidates and would like to make decision asap. if you are interested please respond to this job posting with your updated copy of resume or you can directly reach me on ************.
    $64k-81k yearly est. 60d+ ago
  • Offensive Security Engineer, Assessments (Web3)

    Coinbase 4.2company rating

    Cyber security analyst job in Springfield, IL

    Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system. To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems. Our ******************************** is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. The Application Security organization at Coinbase is seeking to hire an experienced Offensive Security Engineer specializing in Web3 penetration testing and Web3 bug bounty program management and optimization. In this role, you will collaborate with the Bug Bounty Program Lead to drive Web3 bug bounty triage, validation, and strategic initiatives aimed at increasing program efficiency, maturity, and hacker engagement. You will work closely with whitehat hackers, security engineers, and cross-functional teams to enhance Coinbase's security posture through an effective bug bounty program. Additionally, you will perform penetration tests on Web3 technologies and applications, ensuring the security of Coinbase's blockchain-based products and services. *What you'll be doing (ie. job duties):* * Conduct security assessments of Web3 products and services, including smart contracts, DeFi protocols, and blockchain infrastructure. * Collaborate with partner teams to enhance detection and response capabilities for Web3 vulnerabilities. * Stay informed on emerging security trends, advisories, and academic research in the Web3 space. * Lead Web3 bug bounty triage and validation, ensuring timely and accurate assessments of reported vulnerabilities. * Develop and implement strategies to incentivize high-quality bug bounty submissions and engage with the hacker community. * Manage the Web3 bug bounty program, including scope updates, researcher communication, and payout disbursements. * Analyze bug bounty data to identify trends, common vulnerabilities, and areas for improvement. * Collaborate with engineering teams to prioritize and remediate vulnerabilities identified through the bug bounty program. * Mentor and train junior security engineers in Web3 bug bounty triage and analysis. * Provide on-call support for critical Web3 bug bounty-related incidents. * Document and report on Web3 bug bounty metrics and program effectiveness. *What we look for in you (ie. job requirements):* * Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related field. * 3+ years of experience in Web3 application security and penetration testing. * Proven track record of identifying critical vulnerabilities across the blockchain protocol stack, Web2, and Web3 components. * Extensive knowledge of the blockchain ecosystem, including L1/L2 networks, DeFi protocols, and staking mechanisms. * Deep understanding of Web2 security concepts and common vulnerabilities (e.g., OWASP Top 10, SANS Top 25). * Strong analytical skills to identify trends and patterns in vulnerabilities. * Excellent communication skills for engaging with internal teams. * Passion for security and a drive to improve Web3 security posture. * Ability to work independently and take ownership of penetration testing initiatives. * Energy and self-drive for continuous learning in the rapidly evolving crypto space. * Excellence in clear, direct, and kind communication with technical and non-technical stakeholders. * Experience building relationships with product, engineering, and security teams. *Nice to haves:* * Participation in CTFs, bug bounty programs, or open-source security research. * Expertise in Application Security, Network Security, or Cloud Security. * Relevant security certifications (e.g., OSCP, GPEN). * Experience developing and implementing security tooling to support bug bounty triage and analysis. * Experience with bug bounty programs and platforms, including triage, validation, and researcher communication. * Strong analytical skills to identify trends and patterns in bug bounty submissions. * Excellent communication skills to effectively engage with bug bounty researchers. Position ID: P69494 \#LI-remote *Pay Transparency Notice:* Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility**+ benefits (including medical, dental, vision and 401(k)). Pay Range: $152,405-$179,300 USD Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying. Commitment to Equal Opportunity Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the *********************************************** in certain locations, as required by law. Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations*********************************** *Global Data Privacy Notice for Job Candidates and Applicants* Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available ********************************************************** By submitting your application, you are agreeing to our use and processing of your data as required. *AI Disclosure* For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description. For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate. *The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
    $152.4k-179.3k yearly 60d+ ago
  • EPIC SECURITY ANALYST II

    Memorial Health System 4.3company rating

    Cyber security analyst job in Springfield, IL

    The Epic Security Analyst II is responsible for managing user access, security policies, and role-based permissions within the Epic electronic health record (EHR) system. This role ensures compliance with HIPAA, organizational security policies, and Epic best practices while supporting security design, audits, and troubleshooting access-related issues. The analyst collaborates with IT teams, Compliance Officers, Privacy, Information Security and Epic application analysts to maintain secure, efficient, and compliant system access. Please note this is a hybrid position with a set scheduled 3 days (Tues - Thurs) per month onsite in Springfield, IL. Travel expenses are covered per our company guidelines for non-local employees. We are happy to offer the flexibility of a hybrid position with some remote/ at home flexibility. Please note you must reside on one of our approved states in order to be considered: Illinois, Indiana, Kansas, Kentucky, Michigan, Missouri, Ohio, and Wisconsin are the approved states. Qualifications Minimum Qualifications: Educational Background: Bachelor's degree in computer science, Information Systems, Healthcare Informatics, or a related field is preferred. Epic Certification: Certification in Epic Security is required within 1 year of hire date. • Three plus years of IT experience desired. • Experience with EMP, SER, and identity management is preferred. • Experience with user provisioning, role-based access control (RBAC), and security model design is preferred. • Understanding of HIPAA, HITECH, and other healthcare security regulations. • Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication (MFA), and identity management solutions. • Strong analytical, problem-solving, and troubleshooting skills related to Epic security and access issues. • Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users. Responsibilities Principle Duties & Responsibilities: 1. Manage user access, templates, and security roles within Epic. 2. Maintain and configure EMP records, SER security, and role-based access to align with job functions. 3. Implement security best practices to protect patient data and comply with regulatory requirements. 4. Conduct regular security audits and access reviews to ensure compliance with HIPAA and organizational policies. 5. Work with compliance teams and auditors to address security risks and findings. 6. Monitor system logs and security reports to detect and respond to unauthorized access or security breaches. 7. Troubleshoot access issues, security permissions, and authentication problems within Epic. 8. Provide user support, training, and documentation on security policies and access management. 9. Assist in resolving user provisioning errors, break the glass access events, and role conflicts. 10. Work with IT teams to integrate Active Directory, single sign-on (SSO), and identity management systems with Epic security. 11. Coordinate with Epic application analysts and clinical departments to define appropriate security roles. 12. Participate in Epic upgrades, security patches, and system maintenance to ensure ongoing security. 13. Develop and maintain Epic security policies, procedures, and documentation. 14. Identify opportunities for automation, process improvement, and enhanced security measures. 15. Stay up to date with Epic security updates, best practices, and regulatory changes. The intent of this job description is to provide a representative summary of the major duties and responsibilities performed by incumbents of this job. Incumbents may be requested to perform tasks other than those specifically presented in this description. Not ready to apply? Connect with us for general consideration.
    $66k-94k yearly est. Auto-Apply 20d ago
  • Epic Security Analyst II

    Memorial Health 4.4company rating

    Cyber security analyst job in Springfield, IL

    The Epic Security Analyst II is responsible for managing user access, security policies, and role-based permissions within the Epic electronic health record (EHR) system. This role ensures compliance with HIPAA, organizational security policies, and Epic best practices while supporting security design, audits, and troubleshooting access-related issues. The analyst collaborates with IT teams, Compliance Officers, Privacy, Information Security and Epic application analysts to maintain secure, efficient, and compliant system access. Please note this is a hybrid position with a set scheduled 3 days (Tues - Thurs) per month onsite in Springfield, IL. Travel expenses are covered per our company guidelines for non-local employees. We are happy to offer the flexibility of a hybrid position with some remote/ at home flexibility. Please note you must reside on one of our approved states in order to be considered: Illinois, Indiana, Kansas, Kentucky, Michigan, Missouri, Ohio, and Wisconsin are the approved states. Qualifications Minimum Qualifications: Educational Background: Bachelor's degree in computer science, Information Systems, Healthcare Informatics, or a related field is preferred. Epic Certification: Certification in Epic Security is required within 1 year of hire date. • Three plus years of IT experience desired. • Experience with EMP, SER, and identity management is preferred. • Experience with user provisioning, role-based access control (RBAC), and security model design is preferred. • Understanding of HIPAA, HITECH, and other healthcare security regulations. • Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication (MFA), and identity management solutions. • Strong analytical, problem-solving, and troubleshooting skills related to Epic security and access issues. • Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users. Responsibilities Principle Duties & Responsibilities: 1. Manage user access, templates, and security roles within Epic. 2. Maintain and configure EMP records, SER security, and role-based access to align with job functions. 3. Implement security best practices to protect patient data and comply with regulatory requirements. 4. Conduct regular security audits and access reviews to ensure compliance with HIPAA and organizational policies. 5. Work with compliance teams and auditors to address security risks and findings. 6. Monitor system logs and security reports to detect and respond to unauthorized access or security breaches. 7. Troubleshoot access issues, security permissions, and authentication problems within Epic. 8. Provide user support, training, and documentation on security policies and access management. 9. Assist in resolving user provisioning errors, break the glass access events, and role conflicts. 10. Work with IT teams to integrate Active Directory, single sign-on (SSO), and identity management systems with Epic security. 11. Coordinate with Epic application analysts and clinical departments to define appropriate security roles. 12. Participate in Epic upgrades, security patches, and system maintenance to ensure ongoing security. 13. Develop and maintain Epic security policies, procedures, and documentation. 14. Identify opportunities for automation, process improvement, and enhanced security measures. 15. Stay up to date with Epic security updates, best practices, and regulatory changes. The intent of this job description is to provide a representative summary of the major duties and responsibilities performed by incumbents of this job. Incumbents may be requested to perform tasks other than those specifically presented in this description.
    $63k-77k yearly est. Auto-Apply 18d ago
  • Vice President, Chief Information Security Officer

    Carle Health 4.8company rating

    Cyber security analyst job in Urbana, IL

    The Vice President of Information Security/CISO reports directly to the SVP, Chief Risk Officer and will oversee the enterprise-wide security program. The security program includes Governance, Risk and Compliance ("GRC"), Disaster Recovery Management, Identity and Access Management and Cyber Operations. The CISO must have a strong technical background and fully understand threats, risk mitigation and technical controls. The CISO assumes accountability for the daily security tactical operations and overall strategic execution of corporate security roadmaps that safeguards company data and systems against evolving cybersecurity threats. Other responsibilities include collaborating across the health system to develop an incident command structure and plan, balancing security risk management with cost-effective decision-making to support business and care delivery priorities and fostering a culture of security awareness and continuous improvement throughout the organization. The Vice President of Information Security/CISO must exhibit a blend of leadership qualities. The CISO acts as a thought leader and strategic thinker, capable of anticipating future challenges and developing and executing security roadmaps in collaboration with various teams and peers. Leads and mentors their team, committed to team member accountability, collaboration, growth and development. An effective communicator who disseminates information, builds trust, and supports stakeholders across the organization. Appropriately scales the security program in anticipation of changing risks. A decisive leader capable of making critical decisions and executing under pressure. A continuous learner dedicated to staying updated on the latest security trends, threats, and technologies. + **Hybrid** - must be available to attend onsite once-a-month meetings, as well as provide executive presence as needed Qualifications **Certifications:** + Certified Information Systems Security Professional (CISSP) **Education:** + Bachelor's Degree: Computer Science or related **Work Experience:** + Healthcare Leadership in Information Cyber Security - 5+ years Responsibilities + Develops, implements and monitors a strategic, comprehensive enterprise information security risk management program using a risk-based approach. + Drives the development and execution of a comprehensive information security strategy and incident response roadmap and plan that aligns with business goals and industry best practices. + Lead and partners with operations across the system to develop, modify and maintain organizational incident response plans to include a comprehensive ransomware event plan. + Provide regular reporting on the current status of the information security program to executive leadership and board members. + Collaborates with senior management and key business stakeholders (audit & risk, legal, compliance, operations, IT) to align initiatives and resources to meet overall business objectives. + Engages with corporate and external auditors, compliance and legal teams to ensure compliance with internal plans, laws and regulations, including privacy and others, as needed. + Establishes and enforces robust information security policies, standards, and procedures, ensuring adherence across the organization. + Effectively leads incident response efforts in the event of a cybersecurity breach or incident, including coordinating with internal teams and external stakeholders to mitigate the impact and ensure timely resolution and communication. + Oversees a program that evaluates the security posture of third-party vendors and partners and ensuring that appropriate security measures are in place to protect shared data and resources. + Defines security requirements and manages security risks associated with third party vendors to ensure compliance with organizational standards. + Working knowledge of Health Insurance Portability and Accountability Act (HIPAA), National Institute of Standards and Technology ("NIST") Cybersecurity Framework, Payment Card Industry ("PCI"), Information Technology Infrastructure Library, and Information Security Best Practices. + Working knowledge of security technologies such as SIEM, endpoint detection and response, network protection (IPS, NAC, firewalls), vulnerability management, identity management, etc. + Strong understanding of cloud security and experience with cloud service providers (AWS, Azure, etc.) and Artificial Intelligence as it relates to healthcare entities. + Provides strong leadership to the various team members through mentoring, career development, interpersonal skills, and enabling leadership skills. + Exhibits effective team leadership and collaboration skills, with the ability to work effectively with others through conflicting pressures and priorities while resolving complex issues. + Establishes a culture of high performance, productivity, creativity, and innovation. + Stays informed on the evolving landscape of security and technology to continuously improve security practices, policies, and awareness. + Performs other duties assigned. About Us **Find it here.** Discover the job, the career, the purpose you were meant for. The supportive and inclusive team where you can thrive. The place where growth meets balance - and opportunities meet flexibility. Find it all at Carle Health. Based in Urbana, IL, Carle Health is a healthcare system with nearly 16,600 team members in its eight hospitals, physician groups and a variety of healthcare businesses. Carle BroMenn Medical Center, Carle Foundation Hospital, Carle Health Methodist Hospital, Carle Health Proctor Hospital, Carle Health Pekin Hospital, and Carle Hoopeston Regional Health Center hold Magnet designations, the nation's highest honor for nursing care. The system includes Methodist College and Carle Illinois College of Medicine, the world's first engineering-based medical school, and Health Alliance. We offer opportunities in several communities throughout central Illinois with potential for growth and life-long careers at Carle Health. _We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. Carle Health participates in E-Verify and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization. | For more information: *************************._ Compensation and Benefits The compensation range for this position is $0per hour - $0per hour. This represents a good faith minimum and maximum range for the role at the time of posting by Carle Health. The actual compensation offered a candidate will be dependent on a variety of factors including, but not limited to, the candidate's experience, qualifications, location, training, licenses, shifts worked and compensation model. Carle Health offers a comprehensive benefits package for team members and providers. To learn more visit careers.carlehealth.org/benefits.
    $134k-178k yearly est. Easy Apply 60d+ ago
  • Security Engineer II

    Trustmark 4.6company rating

    Cyber security analyst job in Springfield, IL

    Trustmark's mission is to improve wellbeing - for everyone. It is a mission grounded in a belief in equality and born from our caring culture. It is a culture we can only realize by building trust. Trust established by ensuring associates feel respected, valued and heard. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture of diversity and inclusion where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. At Trustmark, we have a commitment to welcoming people, no matter their background, identity or experience, to a workplace where they feel safe being their whole, authentic selves. A workplace made up of diverse, empowered individuals that allows ideas to thrive and enables us to bring the best to our colleagues, clients and communities. We are seeking a highly skilled Cyber Security Engineer to join our team and play a pivotal role in safeguarding our organization's digital assets. The ideal candidate will possess a deep understanding of cybersecurity principles, a strong technical background, and a passion for protecting sensitive information. You will be responsible for engineering, implementing and monitoring security measures for the protection of Trustmark's computer systems, networks and information. The role helps identify and define system security requirements as well as develop detailed cyber security designs. **Responsibilities:** + Design, implement, and maintain security architectures, systems, and solutions to protect critical infrastructure and data. + Conduct vulnerability assessments and penetration testing to identify and mitigate risks. + Develop and implement security policies, standards, and procedures. + Monitor security systems and respond to incidents promptly and effectively. + Stay up-to-date with the latest cybersecurity threats and trends. + Collaborate with cross-functional teams to ensure security is integrated into all aspects of the business. + Provide technical guidance and support to internal stakeholders. **Qualifications:** + Bachelor's degree in Computer Science, Information Technology, or a related field or + 3-5 Years of network engineering or cyber engineering experience + Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001). + Proficiency in network security, systems security, application security, and data security. + Hands-on experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption, SIEM). + Excellent problem-solving and analytical skills. + Strong communication and interpersonal skills. + Ability to work independently and as part of a team. **Preferred Qualifications:** + Certifications such as CISSP, CISA, or CEH. + Experience with cloud security (e.g., AWS, Azure, GCP). + Knowledge of scripting and programming languages (e.g., Python, PowerShell). Brand: Trustmark Come join a team at Trustmark that will not only utilize your current skills but will enhance them as well. Trustmark benefits include health/dental/vision, life insurance, FSA and HSA, 401(k) plan, Employee Assistant Program, Back-up Care for Children, Adults and Elders and many health and wellness initiatives. We also offer a Wellness program that enables employees to participate in health initiatives to reduce their insurance premiums. **For the fourth consecutive year we were selected as a Top Workplace by the Chicago Tribune.** The award is based exclusively on Trustmark associate responses to an anonymous survey. The survey measured 15 key drivers of engaged cultures that are critical to the success of an organization. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, sexual identity, age, veteran or disability. Join a passionate and purpose-driven team of colleagues who contribute to Trustmark's mission of helping people increase wellbeing through better health and greater financial security. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match. When you join Trustmark, you become part of an organization that makes a positive difference in people's lives. You will play a vital role in delivering on our mission of helping people increase wellbeing through better health and greater financial security. Our customers tell us they simply appreciate the personal attention and knowledgeable service. Others tell us we've changed their lives. At Trustmark, you'll be part of a close-knit team. You'll enjoy abundant opportunities to grow your career. That's why so many of our associates stay at Trustmark and thrive. Trustmark benefits from more than 100 years of experience but pairs that rich history with a palpable sense of optimism, growth and excitement for what's ahead - and beyond. This is a place where associates bring their whole selves to work each day. A place where you can be yourself. Whatever your beyond is, you can achieve it at Trustmark.
    $78k-100k yearly est. 60d+ ago
  • Senior Cyber Security Engineer

    Rural King 4.0company rating

    Cyber security analyst job in Mattoon, IL

    About us Rural King is America's Farm and Home Store, providing essentials to the communities we serve. With a wide array of necessities ranging from food and feed to farm and home products, Rural King serves over 130 locations across 13 states and is constantly expanding. Our annual sales exceed $2.5 Billion, and our heart beats in Mattoon, IL, home to our corporate office, distribution center, and flagship store. One thing our customers appreciate is our unique shopping experience, complete with complimentary popcorn and coffee. It's just one way we show our appreciation for their support. At Rural King, we value our associates and strive to create a positive, rewarding workplace. We offer growth opportunities, competitive benefits, and a people-first environment where dedicated individuals come together to serve rural communities passionately. Join us, and you'll find not just a job but a chance to grow professionally, contribute meaningfully, and make a difference in the lives of those we serve. How we reward you 401(k) plan that provides a 100% match on the first 3% of your contributions and 50% of the next 2% Healthcare plans to support your needs Virtual doctor visits Access to Centers of Excellence with Barnes Jewish Hospital and Mayo Clinic's Complex Care Program 15% Associate Discount Dave Ramsey's SmartDollar Program Associate Assistance Program RK Cares Associate Hardship Program 24/7 Chaplaincy Services Company paid YMCA Family Membership What You'll Do As the Senior Cyber Security Engineer, you'll drive vision and direction for Rural King's security posture while supervising a small team of Security Analysts. You'll architect and operate a Cisco-centered security stack, champion Zero Trust principles, mature identity as the new perimeter, and drive continuous improvement through automation and measurable risk reduction. You'll partner across infrastructure, applications, and business stakeholders to communicate risk clearly and deliver pragmatic, timely risk mitigation. Coach, prioritize work, set goals, and create growth paths for a small team of Security Analysts; define on-call and incident roles. Design/operate Cisco Secure Firewall (Firepower/FMC), ISE (802.1X/NAC), Duo MFA, Umbrella (DNS-layer/SIG), Secure Client/AnyConnect, and email security solutions. Design policy, segmentation, and monitoring across HQ, DCs, and stores. Design and implement a Zero-Trust Architecture (ZTA), including least privilege, continuous verification, strong device and user trust signals, and micro-segmentation. Assist in guiding enterprise IAM with Entra ID/Azure AD; govern SSO/MFA (DUO), SCIM lifecycle, RBAC, privileged access. Support external partners for MDS/SIEM, coordinate red/blue activities, and run incident response end-to-end. Own vulnerability intake, risk scoring, SLAs, and remediation tracking. Support PCI and other retail/security obligations; maintain policies/standards, evidence, and control testing; partner with Internal Audit and external assessors. Drive patching, endpoint/server hardening, secure configs (CIS/NIST), EDR, and tabletop exercises. Deliver clear, audience-appropriate updates to executives and cross-functional teams; publish playbooks, runbooks, and metrics dashboards that show risk reduction and program maturity. Use discretion and independent judgment in daily decisions while maintaining high confidentiality and professionalism. Actively participate in learning initiatives such as training programs, workshops, and webinars. Leverage these opportunities to acquire new knowledge, refine existing skills, and stay current on the latest developments. Provide friendly, proactive, and professional internal and external support to others, assisting with inquiries, concerns, and issues promptly and effectively. Demonstrate behaviors that exemplify Rural King's Values: People First, Integrity, Attitude, Initiative, Teamwork, Accountability, and Continuous Improvement. Perform other duties as assigned. Supervisory Responsibilities Yes Essential Qualities for Success 10+ years of hands-on cybersecurity/IT security engineering, plus 2+ years leading or supervising security teams. Bachelor's degree in a relevant field (or equivalent experience). CISSP, CISM, CCNP Security, and Cisco ISE/Duo/Umbrella certifications preferred. Demonstrated Zero Trust design and implementation across identity, device, network, and application layers. Working knowledge of NIST CSF/800-53, CIS Controls, and PCI DSS; risk assessment and control design experience. Proficiency with Microsoft Office Suite or related software. Working knowledge of Microsoft Office Suite. Comfortable navigating computer systems and software to assist customers or manage activities. Excellent verbal and written interpersonal and communication skills Physical Requirements Ability to maintain a seated or standing position for extended durations. Prolonged periods working at a computer. Occasional travel to stores/DCs as needed for deployments, audits, or incidents. Capability to lift 15 pounds periodically. Ability to navigate and access all facilities. Close vision for computer-related activities. Reasonable accommodations may be made to enable individuals with disabilities to perform essential job functions. The pay range for this position is $115,000 - $120,000 annualized and is bonus eligible. Exact compensation is determined by factors such as relevant geographic location, education, certifications, experience, job level, shift, and organizational needs. To learn more about our benefits, review here ************************************************************************************
    $115k-120k yearly Auto-Apply 55d ago
  • Product Security Engineer, Instagram

    Meta 4.8company rating

    Cyber security analyst job in Springfield, IL

    The Instagram Security Ecosystems team is seeking a product-focused security engineer interesting in enabling Instagram product teams to develop features with a focus on security and user safety. You will be relied upon to directly work with Instagram engineers, hardening both product features and our protective frameworks that make life harder for bad actors on the Instagram platform. **Required Skills:** Product Security Engineer, Instagram Responsibilities: 1. Threat Modeling and Security Architecture: Work directly with product managers and technical leads on threat models and security architecture for novel Instagram features or products 2. Security Reviews: Perform manual design and implementation reviews of web, mobile, and native code 3. Developer Guidance: Provide guidance and education to developers that help prevent the authoring of vulnerabilities 4. Automated Analysis and Secure Frameworks: Work with other security teams to improve Instagram's static and dynamic analysis and frameworks to scale coverage 5. Bug Bounty: Help provide technical guidance to our world class bug bounty program and independent security researchers 6. Industry Impact: Push the industry forward through conference talks and open source projects to contribute broadly to security for the world **Minimum Qualifications:** Minimum Qualifications: 7. B.S. or M.S. in Computer Science, Cybersecurity, or related field, or equivalent experience 8. 8+ years of experience finding vulnerabilities in interpreted languages (Python, PHP) 9. Extensive, proven experience in threat modeling and secure systems design 10. Experience with exploiting common security vulnerabilities **Preferred Qualifications:** Preferred Qualifications: 11. Product software engineering or product management experience 12. Experience in security consulting or other leadership-facing security advisory roles 13. Familiarity with cybersecurity investigations, abuse operations, and/or security incident response 14. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.) **Public Compensation:** $184,000/year to $257,000/year + bonus + equity + benefits **Industry:** Internet **Equal Opportunity:** Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment. Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
    $184k-257k yearly 60d+ ago
  • Principal Security Engineer - Hardware Security

    Oracle 4.6company rating

    Cyber security analyst job in Springfield, IL

    The Oracle Cloud Infrastructure (OCI) team can provide you the opportunity to build and operate a suite of massive scale, integrated cloud services in a broadly distributed, multi-tenant cloud environment. OCI is committed to providing the best in cloud products that meet the needs of our customers who are tackling some of the world's biggest challenges. We offer unique opportunities for smart, hands-on security engineers with the expertise and passion to solve difficult problems in distributed highly available services and virtual infrastructure. At every level, our engineers have a significant technical and business impact designing and building innovative new systems to power our customer's business critical applications. Our customers run their businesses on our cloud, and our mission is to provide them with the most secure cloud services. The OCI Hardware Security group conducts Security assessments of the production hardware that runs our cloud, and develops the requirements for future Networking, Storage, Compute components. We work closely across Oracle, with third party vendors, and with standards organization to influence the next generation of hardware platform security. In addition to defining the best hardware, OCI HW Security knows that platform security also depends on how that hardware is used. To that end, HW Security also works closely with OCI's operations and engineering teams, constantly striving to improve Oracle Cloud's overall operational security posture by defining the supply chain and operational requirements to establish best practices for managing security for every device in our data centers. A security-focused engineer at any level can have significant technical and business impact. Come shape the future of one of the largest clouds on earth with us. Overall, the OCI Security Architecture team performs a variety of work ranging from cloud security, application security, vulnerability analysis, threat modeling, and hacking/enterprise network penetration. The biggest challenges for the team are the dynamic and fast growth of the business, driving us to improve our systems, tools, and automation to scale to our security expertise several orders of magnitude greater than what we can support today. We understand that software is living and needs investment. The challenge is making the right tradeoffs, communicating those decisions effectively, and crisp execution. **Responsibilities** Career Level - IC4 + Develop and communicate requirements for new vendors and hardware (compute, storage, networking) + Perform architectural reviews, penetration testing, vulnerability analysis of compute infrastructure hardware such as o Servers (Intel, AMD and ARM) o Baseboard Management Controllers such as Oracle's ILOM o UEFI and platform firmware o Smart NICS o Storage devices o Network controllers and other peripherals Network hardware/firmware, topology, and security expertise + Provide consulting on security risk associated with compute hardware and firmware in the context of cloud usage. + Provide consulting and review of device sanitization as per NIST-800-88 R1 standards. + Provide standard operating procedures for safe use of compute hardware through its lifecycle i.e., provisioning, operations and reuse/decommission. Skills + Engage with Oracle Hardware Division and third-party vendors to understand their roadmaps. + Create planning roadmaps to drive multi-year security improvements across the OCI Infrastructure + Review or assess engineering changes, or revisions of, an existing component. E.g.: new firmware for a device, vendor revision of an existing device Identify and participate in external standards groups to drive improvements across the industry + Consult development teams and third-party vendors in design and architecture of secure systems. + Champion and consult on secure development life cycle practices. + Communicate and educate Senior Management on key Security topics and directions. Disclaimer: **Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.** **Range and benefit information provided in this posting are specific to the stated locations only** US: Hiring Range in USD from: $109,200 to $223,400 per annum. May be eligible for bonus and equity. Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. Oracle US offers a comprehensive benefits package which includes the following: 1. Medical, dental, and vision insurance, including expert medical opinion 2. Short term disability and long term disability 3. Life insurance and AD&D 4. Supplemental life insurance (Employee/Spouse/Child) 5. Health care and dependent care Flexible Spending Accounts 6. Pre-tax commuter and parking benefits 7. 401(k) Savings and Investment Plan with company match 8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. 9. 11 paid holidays 10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. 11. Paid parental leave 12. Adoption assistance 13. Employee Stock Purchase Plan 14. Financial planning and group legal 15. Voluntary benefits including auto, homeowner and pet insurance The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted. Career Level - IC4 **About Us** As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's challenges. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity. We know that true innovation starts when everyone is empowered to contribute. That's why we're committed to growing an inclusive workforce that promotes opportunities for all. Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_************* or by calling *************** in the United States. Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
    $109.2k-223.4k yearly 60d+ ago
  • Infrastructure Security Analyst

    Tekwissen 3.9company rating

    Cyber security analyst job in Bloomington, IL

    TekWissen provides a unique portfolio of innovative capabilities that seamlessly combines clients insights, strategy, design, software engineering, and systems integration. ***************** Job Description Required: · Must Have: Citrix Netscaler support and configuration · Significant experience in supporting network security devices such as firewalls and proxies with emphasis on remote access technologies such as VPN and Citrix Netscaler · Significant experience in TCP/IP networking, including network design and troubleshooting. · 1 to 2 years experience in network sniffers and packet analysis. · 1 to 2 years experience in general security. Desired Skills: · Some experience in scripting languages such as Shell and Perl. · Strong customer service and results focus. · Strong organizational, communication, and interpersonal skills. · Strong problem resolution and decision making skills. · Working both independently and in a team environment. · Ability to handle competing priorities. · Able to consult other Business areas. · Sound decision-making ability regarding matters of moderate to high complexity and importance. · Strong analytical and problem-solving skills to solve complex problems logically and systematically · Self-motivated; Ability to work independently on matters of moderate to high complexity and importance with only broad direction. · High technical aptitude. · Security and/or Network Certification is a plus, especially CISSP Additional Information All your information will be kept confidential according to EEO guidelines.
    $70k-93k yearly est. 60d+ ago
  • Engineer, Information Security and Risk

    Cardinal Health 4.4company rating

    Cyber security analyst job in Springfield, IL

    Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500. **_Department Overview:_** **Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. **Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments. **Responsibilities:** + **M&A Integration Execution:** Collaborate and engage with IAM Lead and other business partners on planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions. + **Design and Implement Sailpoint IIQ Solutions:** Configure and customize Sailpoint IIQ components (Lifecycel Manager, Compliance Manager etc). Also develop workflows, rules, and connectors for identity governance. + **Application integration with Sailpoint IIQ:** Integrate Sailpoint IIQ with enterprise applications, directories and cloud platforms in addition to developing and maintaining connectros for provisioning and de-provisioning. + **Sailpoint IIQ Development and Scripting:** Write and maintain BeanShell scripts, Java code and XML configurations, develop customer Sailpoint tasks and workflows. + **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure. + **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions. + **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information. + **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration. + **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders. + **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends. **Qualifications** + Experience with SailPoint IdentityIQ (IIQ) is a must + Experience with SailPoint IIQ Integrations (Workday, Active Directory/LDAP, Webservices, SCIM, JDBC, SAP) + Experience implementing Life Cycle Manager (LCM) Configuration workflow tasks that model business functions, including Lifecycle Requests (Role or Entitlement), Lifecycle Events (Joiner, Mover, or Leaver), and LCM Workflow Details (Workflows and Subprocesses) + Solid understanding of the SailPoint object model, rules, and policies + Experience with both lifecycle manager (LCM) and compliance manager (CM) modules + Knowledge of Active Directory, LDAP, Workday, and cloud platforms (GCP, MS Entra ID) is required + Proven track record of successful IAM implementations including large scale enterprise deployments. + Experience working within regulatory standards and requirements such as, SOX, HIPAA, GDPR etc. is desired. **Anticipated salary range:** $94,900 - $135,600 **Bonus eligible:** No **Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being. + Medical, dental and vision coverage + Paid time off plan + Health savings account (HSA) + 401k savings plan + Access to wages before pay day with my FlexPay + Flexible spending accounts (FSAs) + Short- and long-term disability coverage + Work-Life resources + Paid parental leave + Healthy lifestyle programs **Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity. _Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._ _Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._ _To read and review this privacy notice click_ here (***************************************************************************************************************************
    $94.9k-135.6k yearly 52d ago
  • Engineer, Information Security and Risk

    Cardinal Health 4.4company rating

    Cyber security analyst job in Springfield, IL

    Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500. **_Department Overview:_** **Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. **Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments. Lead IAM work for new customer onboardings and migrations. Collaborate with CAH Account Management, Application Teams, and Customers to design, implement, and test federated SSO solution based on customer login requirements. Provide technical guidance and act as primary point of contact for business partners and customer related to IAM work for onboarding. Additional responsibilities include supporting application integrations and enhancing SSO self service application onboarding. **Responsibilities:** + **Customer Onboarding IAM Efforts - Strategy & Execution :** Lead the planning, design, and execution for Customer Onboarding via federated SSO, ensuring alignment with overall business and security objectives. This includes assessing multiple Cardinal Health e-commerce applications, understanding login requirements for new/existing customers, designing, testing and implementing solutions etc to ensure top notch user login experience and enhancing Cardinal Health's security posture. + **Collaboration & Communication:** Coordinate cross-functional teams, including Customer Business and IT teams, Cardinal Health's Account Management/Sales and Application teams, Information Security and others to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical internal and external stakeholders. + **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning. + **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions. + **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC) frameworks. + **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration. + **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends. **Qualifications:** + **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience. + **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred. + **Technical Expertise:** + Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA + Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP). + Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint). + Strong understanding of security principles, risk management, and access control models (e.g., RBAC). + Familiarity with Zero Trust architecture principles. + Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context. + Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders. + Detail-oriented mindset to ensure precise access control configurations and compliance. + Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements + Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform. + Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment. **Anticipated salary range:** $94,900 - $135,600 **Bonus eligible:** No **Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being. + Medical, dental and vision coverage + Paid time off plan + Health savings account (HSA) + 401k savings plan + Access to wages before pay day with my FlexPay + Flexible spending accounts (FSAs) + Short- and long-term disability coverage + Work-Life resources + Paid parental leave + Healthy lifestyle programs **Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity. _Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._ _Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._ _To read and review this privacy notice click_ here (***************************************************************************************************************************
    $94.9k-135.6k yearly 52d ago

Learn more about cyber security analyst jobs

How much does a cyber security analyst earn in Decatur, IL?

The average cyber security analyst in Decatur, IL earns between $61,000 and $110,000 annually. This compares to the national average cyber security analyst range of $66,000 to $117,000.

Average cyber security analyst salary in Decatur, IL

$82,000
Job type you want
Full Time
Part Time
Internship
Temporary