Cybersecurity Forensic Examiner I

Primary City/State: Phoenix, Arizona Department Name: IT Incident Mgmt & Forensics Work Shift: Varied Job Category: Information Technology Innovation and highly trained staff.
The Cybersecurity professionals at Banner Health are utilizing cutting-edge technology to change health care for the better.
If you’re ready to change lives, we want to hear from you.
The Cybersecurity Forensic Engineer I will be a part of the Digital Forensic and eDiscovery team within the Banner Health IT Cybersecurity department.
You will be responsible for Cybersecurity support for incident response and management including the identification, collection, and preservation of legal data, legal claims department support for Legal discovery, and case management This is a fully remote position and available if you live in the following states only: AK, AL, AR, AZ, CA, CO, FL, GA, IA, ID, IN, KS, KY, MI, MN, MO, MS, NC, ND, NE, NM, NV, NY, OH, OK, OR, PA, SC, TN, TX, UT, VA, WA, WI & WY.
Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader.
We offer stimulating and rewarding careers in a wide array of disciplines.
Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you'll find many options for contributing to our award-winning patient care.
POSITION SUMMARY This position is responsible for investigating and responding to escalated security incidents, coordinating various teams and departments as needed, leading technical analysis and discussions, and creating various forms of incident documentation and communication.
This position advises on countermeasures and participates in improving security analytics and alerts.
This position assists in formulating and defining incident response scope and objectives based on business needs and a good understanding of applicable industry and regulatory requirements.
Competent to work at the highest practical understanding of most phases of cybersecurity analysis and design as it applies to current and future system requirements.
Proficiency in investigation and legal preservation workflows and performing complex operational task that require thoughtful analysis.
Trouble-shooting tasks related to access control, provisioning requests, network & endpoint security systems.
Required to operate under the highest standards of integrity while providing fair and impartial findings for internal and external Investigations.
CORE FUNCTIONS 1.
Assess escalated security events and incidents and drive response actions to minimize impact to the business.
May support various departments with investigative services as business requires.
2.
Acts as Incident Coordinator and Scribe for high impact cyber breaches and advanced attacks.
Supports the communication hub during handling of cybersecurity incidents, recoveries, breaches, intrusions, and system abuses.
Collaborates on countermeasures.
3.
Participates in security reviews, evaluations, tabletop exercises, risk assessments, and post-incident activities and develops appropriate security posture recommendations.
4.
Creates documentation of incident response activities supporting identified outcomes, metrics, reporting, and lessons learned.
5.
Participates and assists in development of alerts and Indicators of Compromise detection capabilities.
Participates in the ongoing evaluation and development of security policies and procedures and maintains Incident Response documents.
6.
Responsible for providing technical expertise and support for security software, including operational aspects of the software.
7.
Manages and conducts eDiscovery operations including legal preservation, litigation hold, forensic collections, and native file productions.
Including the management of evidence documentation and chain-of-custody.
8.
Responsible for providing guidance, direction, and oversight for company’s compliance with all federal, state, and local mandated cybersecurity laws, rules, and guidelines.
Remain current with the latest industry technical information.
9.
Under general direction, this position is responsible for cybersecurity, digital forensic examinations, and eDiscovery operations across multiple departments system-wide and requires interaction at all levels of staff and management.
MINIMUM QUALIFICATIONS Must possess strong knowledge of business, information security and/or computer science as normally obtained through the completion of a bachelor's degree or equivalent combination of relevant education, technical, business and healthcare experience.
Certification in at least one of the following areas within one year of entering the position.
EnCase Certified Examiner (EnCE), EnCase Certified eDiscovery Practitioner (EnCEP), Certified Computer Examiner (CCE), or other certification designated by the Cybersecurity Leader.
Must possess at least two years of experience in Information Technology, Cybersecurity, in a corporate or similar environment with Forensic knowledge or training.
Requires ability to communicate and interact across cross functional departments and facilities and at various levels.
Ability to balance project workloads with customer support and on-call demands.
The position will be required to work variable shifts and hours and carrying/responding to a page may be required.
PREFERRED QUALIFICATIONS Additional related certification preferred.
Experience in cybersecurity controls, policies, and procedures.
Experience with analyzing network activities, responding to anomalies, and reporting events.
Experience with level 1 incident response handling and addressing reported or detected incidents.
Digital forensics experience and incident response experience preferred.
IAC Certified Forensic Examiner (GCFE), EC-Council Certified Incident Handler (ECIH), COMPTIA Security + or other Cybersecurity Certifications.
Additional related education and/or experience preferred.
EOE/Female/Minority/Disability/Veterans Our organization supports a drug-free work environment.
Privacy Policy