Risk Analyst II - InfoSec

The Risk Analyst II - InfoSec role is a senior-level position within the Digital Transformation Information Services Information Security team at NorthEast Provider Solutions Inc. in Valhalla, NY (onsite). The position focuses on designing, implementing, and managing enterprise security solutions across network security, identity and access controls, endpoint detection and response, cloud security, and security documentation.

Key Responsibilities

• Design, implement, and manage enterprise security solutions, including Cisco security platforms such as Secure Network Analytics (SNA) / Stealthwatch, Identity Services Engine (ISE), AnyConnect, Firepower, and Umbrella.
• Configure, maintain, and optimize Palo Alto Networks firewalls to enforce network security policies.
• Administer and enhance enterprise email security and filtering to help protect against phishing, malware, and data loss.
• Design and maintain cloud security controls including policy enforcement, continuous monitoring, and compliance validation.
• Architect and support network segmentation initiatives aligned with zero-trust architecture principles.
• Deploy and manage zero-trust/SASE secure remote access solutions, including zero-trust solutions.
• Administer and enhance Identity and Access Management (IAM) controls, ensuring strong authentication, least privilege, and secure access governance.
• Manage Microsoft EntraID capabilities, including Conditional Access policies and Microsoft Authenticator for MFA.
• Deploy, monitor, and respond to alerts from CrowdStrike (Endpoint Detection & Response, EDR).
• Support OT/IoT/Medical device security initiatives to improve visibility, vulnerability identification, remediation, and risk reduction.
• Investigate security alerts, support incident response activities, and coordinate remediation with IT and infrastructure teams.
• Maintain security documentation, system configurations, and operational runbooks.

Required Qualifications

• Minimum 5-7 years of IT Infrastructure or IT Security experience.
• Hands-on experience with Cisco security technologies, including Cisco Secure Network Analytics (SNA) / Stealthwatch and Cisco Identity Services Engine (ISE).
• Bachelor’s degree in information technology, Information Security, or related/relevant discipline; an equivalent combination of experience and education may be substituted.
• CISSP or equivalent industry certification (required).
• Knowledge of computer systems and applications in support of medical data reporting requirements.
• Knowledge of program planning and evaluation techniques.
• Ability to compile, analyze, and interpret InfoSec data and forecast trends.
• Ability to work effectively with technology and medical professionals.
• Effective communication skills (oral and written) and proficiency using computer applications such as spreadsheets, word processing, calendar, e-mail, and database software.
• Good judgment, initiative, accuracy, thoroughness, and physical condition commensurate with the position.

Special Requirements

• Experience configuring and managing Palo Alto Networks firewalls.
• Experience with enterprise email security and filtering platforms.
• Strong understanding of cloud security fundamentals, including monitoring, policy enforcement, and compliance controls.
• Knowledge of network segmentation strategies and zero-trust architecture concepts.
• Practical experience with Microsoft Entra, including Conditional Access and Microsoft Authenticator deployment.
• Experience managing or supporting CrowdStrike (or similar EDR solutions).
• Familiarity with OT/IoT/Medical device security platforms, preferably Claroty xDome.
• Experience designing, implementing, and maintaining Zero Trust architecture and operating principles; Netskope experience preferred.
• Solid understanding of IAM principles, authentication methods (MFA, SSO), and least privilege access.
• Strong analytical, troubleshooting, and incident response skills.

Relevant Technologies

• Cisco Secure Network Analytics (SNA), Stealthwatch, Identity Services Engine (ISE), AnyConnect, Firepower, Umbrella
• Palo Alto Networks firewalls
• Microsoft EntraID, Conditional Access, Microsoft Authenticator, MFA
• CrowdStrike (EDR), Zero-trust/SASE, EDR
• OT/IoT (including Claroty xDome)
• Netskope
• CISSP

Compensation and Location

• Location: Valhalla, NY (onsite)
• Salary: USD 110,564 - 138,996 per year

Benefits

• Health Insurance
• Dental
• Vision
• Retirement Savings Plan
• Flexible Savings Account
• Paid Time Off
• Holidays
• Tuition Reimbursement

About NorthEast Provider Solutions Inc.

NorthEast Provider Solutions Inc.