Sr or Lead Cybersecurity Analyst

When it comes to making a meaningful difference in the lives of our customers and employees, USAble Life is always ready. We are a diverse group of individuals working together to go the extra mile. Through our DEI initiatives, employees feel empowered to bring their talents and voice to our culture.

Our passion for delivering the best products is matched only by our passion for our people. We are committed to making a meaningful difference in the lives of others which extends beyond our office walls. USAble Life has a long tradition of supporting our communities, and we’re proud of the fact that our employees share that commitment.
We have been recognized as a “Best Places to Work” in Arkansas, Florida, and Hawaii. You’ll be rewarded with opportunities for personal and professional development and opportunities for advancement. This, coupled with our engaging culture and a comprehensive benefits package, ensures we are committed to our employees.
Check out how we make a meaningful difference in the lives of others!

What We Offer You:
A culture that values employees and celebrates, empowers, and inspires a diverse workforce
Outstanding and affordable benefits package
PTO provided at date of hire
11 paid holidays
401(k) with up to 6% match; fully vested from day 1
Remote opportunities with company-provided equipment
Team-oriented, collaborative group of peers
Career advancement opportunities
Tuition Reimbursement
Employee Assistance Program
Inclusion Council and Employee Resource Groups
Recharge Days and Volunteer Time Off
Pay Transparency:

Our salary ranges are structured to provide opportunities for growth and advancement within a role. As a result, most new hires are placed between the minimum and midpoint of the range based on qualifications and experience, while the top of the range is generally reserved for employees who have demonstrated sustained expertise and performance in the position.

The anticipated pay for new hires entering as a Sr Cybersecurity Analyst is between $100,000 to $125,000. The anticipated pay for new hires entering as a Lead Cybersecurity Analyst is between $115,000 to $144,000.

Pay is based on non-discriminatory factors including but not limited to work experience, education, location, licensure requirements, proficiency and qualifications, and company tenure & equity. In addition to base compensation, this role is eligible for an annual incentive plan based on company performance and individual performance.
Sr Cybersecurity Analyst Overview
The Senior Cybersecurity Analyst partners across the organization to ensure business solutions are designed and operated in compliance with security, privacy, and regulatory requirements, while advancing enterprise security capabilities. This role acts with vision in identification and assessment of emerging information security trends and alignment to existing architectures for the betterment of the overall organization. This position assists in information security functions including security configuration, continuous monitoring of centralized information management systems, investigation and response to security incidents, vulnerability management, firewall administration and oversight, identity management, and the administration of global security management systems. This position will also provide support for security-based control frameworks. Additionally, it is a role that is heavily involved in cross-functional projects to positively impact the Company and customers, modeling the values and inclusiveness of all employees.
Lead Cybersecurity Analyst Overview
The Lead Cybersecurity Analyst partners across the organization to ensure business solutions are designed and operated in compliance with security, privacy, and regulatory requirements, while advancing enterprise security capabilities. The Lead acts with vision in identification and assessment of emerging information security trends and alignment to existing architectures for the betterment of the overall organization. This position assists in information security functions including security configuration, continuous monitoring of centralized information management systems, investigation and response to security incidents, vulnerability management, firewall administration and oversight, identity management, and the administration of global security management systems. The position will also provide support for security-based control frameworks. Additionally, this role will be heavily involved in cross-functional projects to positively impact the Company and customers, modeling the values and inclusiveness of all employees.
Essential Duties:
Analyze security logs and events using SIEM; conduct vulnerability assessments and penetration testing; develop and maintain scripts, routines and software to perform vulnerability threat assessments; investigate and respond to security incidents
Participates as a member of the security incident response team and evaluates security incidents, develops solutions and communicates status and outcomes to management
Conducts technical analysis to determine scope, impact, and root cause of security incidents; coordinate containment and recovery actions; and communicates status and outcomes to management
Use security monitoring and forensic tools to collect and analyze evidence, document findings, and produce incident reports and post-incident recommendations
Maintain effectiveness of enterprise security subsystems and controls
Provides guidance to junior staff
Provide guidance on design, strategy and administration for Active Directory/Group Policy and Microsoft Entra ID (Azure AD), including lifecycle management, privileged access, and policy enforcement
Provide design, oversight and administration of customer identity and access management systems
Integrate IAM controls with security monitoring, vulnerability management, and change processes
Regularly review security best practices to ensure enterprise firewalls are properly administered and hardened, including rule set management, change and configuration management, and timely firmware and software patching
Apply network security best practices and integrate firewall telemetry with SIEM
Review current and proposed architectures, identify design gaps, and recommend security enhancements
Evaluate security implications of system changes and ensure secure configurations
Perform and review comprehensive risk assessments, including third-party and vendor security
Contribute to policy and procedure development aligned to frameworks
Maintain the enterprise security awareness training program and track control effectiveness
Work closely with Cybersecurity leadership and Infrastructure/Operations teams; serve as a security SME
Performs other related duties and responsibilities as assigned
Lead design, strategy and administration for Active Directory/Group Policy and Microsoft Entra ID (Azure AD), including lifecycle management, privileged access, and policy enforcement (Lead Cybersecurity Analyst Only)
Required Knowledge, Skills and Abilities:
Strategic thinker with strong communication skills and ability to build trust through mutual respect and ongoing communication
Organized, collaborative problem solver effective in dynamic environments
Solid grounding in networking and security best practices
Strong working knowledge with COBIT, NIST, or ISO frameworks
Project management experience
Experience and knowledge base of solutions, trends, and information security systems including: SIEM operations, vulnerability management, MFA/SSO, Active Directory/Group Policy, Microsoft Entra ID (Azure AD)
Firewall administration and network security tooling
Required Education and Experience:
Bachelor’s degree in Information or Cyber Security, Telecommunications, Engineering, Computer Science, Management Information Systems, or relevant field (equivalent military or work experience can be considered in lieu of formal education)
5+ years in information security, 5+ years in IT, and 3+ years supporting identity environments
8+ years in information security, 10+ years in IT, and 7+ years supporting identity environments (Lead Cybersecurity Analyst Only)

CISSP or equivalent in good standing; any applicant working on their certification will meet this requirement as long as certification is obtained within 1 year of hire date
Preferred Education and Experience:
Advanced certifications (e.g., CCIE, CCNP, CCSP, CISM, CRISC, CEH or SANS)
Experience in regulated environments and industry audits
Understanding of HIPAA/HITECH environments
Blue Cross Blue Shield or other health and/or life insurance company experience
Experience with Department of Insurance audits
Knowledge of the insurance industry regulatory landscape
Experience with Microsoft Windows platforms and major cloud platforms
Cloud Platform experience with major vendors (Azure and AWS), including PaaS, SaaS, IaaS
Knowledge of the following concepts: Firewalls, VPN, IPS, Building Security Systems (cameras, doors, badge scanners), Endpoint protection, Mobile Device Management (MDM), Web proxy and traffic monitoring
Working Conditions (Physical Demands):
Normal, no adverse or hazardous conditions
Occasional evenings/weekends; travel less than 5%
This job description is intended to convey information essential to understanding the scope of the position and its general requirements. It is not exhaustive and may be subject to modification at any time to meet the evolving needs of the organization.