Anticipated End Date: 2024-12-31 Position Title: Information Security Analyst Sr. Job Description: Information Security Analyst Sr. Location: This position will work a hybrid model (remote and in office 1 - 2 days per week). Candidates must live within 50 miles of Elevance's Indianapolis Pulse Point location. The Information Security Analyst Sr. is responsible for managing the delivery of information and network security systems and/or technology services. The ideal candidate will have a passion for security and a deep understanding of secure coding practices, penetration testing across web, mobile, and network environments, and a strong grasp of regulatory compliance such as HIPPA and PCI DSS. This role is critical in providing enterprise security solutions to meet business, regulatory, and legal requirements, ensuring the confidentiality, integrity, and availability of our information assets. How you will make an impact: * Participate and complete tasks associated with the implementation of systems and network security technologies. * Execute comprehensive testing plans for security effectiveness. * Coordinate and prepare detailed reports of data security events and incidents. * Provide support for system and network architecture, offering technical guidance to business and technology associates. * Resolve complex technical issues and perform system and network upgrades. * Design and analyze vendor services in relation to information security requirements; maintain relationships with key vendors. * Engage in lights-on initiatives for equipment consolidation or business relocations. * Perform complex configuration changes to align with business and information security needs. * Conduct capacity analysis, recommending and implementing necessary increases. * Address Level 3 and 4 change and problem requests; lead Level 1 and 2 incident recoveries and root cause analysis. Minimum Requirements: Requires a bachelor's degree or equivalent combination of education and experience that would provide the knowledge to perform such work. Experience must include a minimum of 3 years experience in a support & operations or design & engineering role in any of the following areas: access management or network security technologies, servers, networks, Network communications, telecommunications, operating systems, middleware, disaster recovery, collaboration technologies, hardware/software support or other infrastructure services role; or any combination of education and experience, which would provide an equivalent background. Requires experience providing top-tier support for 3 or more of the information security technology areas: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security. Preferred Skills, Capabilities, and Experiences: * Technical security certifications (e.g. Systems Security Certified Practitioner) strongly preferred. * BA/BS degree in Information System and Computer Science or related field of study strongly preferred. * Penetration testing experience is preferred. * Proficiency in programming languages such as Java, .NET, or Python, with the ability to analyze code. * Experience in the code review process and code quality assurance. * Understanding of cloud environments and infrastructure services like AWS, Azure, or GCP. * Comprehensive knowledge of information systems security methodologies and practices, including least privilege access control, system hardening, system audit and log file monitoring, security policies, and incident handling. * Familiarity with security assessments and vulnerability scanning techniques. * Strong understanding of application and session layer protocols. * Proficiency with API testing tools such as SoapUI, REST-assured, and Postman. * Knowledge of Web Application Firewall (WAF) management. Job Level: Non-Management Exempt Workshift: 1st Shift (United States of America) Job Family: IFT > IT Security & Compliance Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health. Who We Are Elevance Health is a health company dedicated to improving lives and communities - and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve. How We Work At Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business. We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few. Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process. Candidates must reside within 50 miles or 1-hour commute each way of a relevant Elevance Health location. The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws. Elevance Health is an Equal Employment Opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact elevancehealthjobssupport@elevancehealth.com for assistance.