About Company
Kaiser Permanente is one of America’s leading not-for-profit health plans, providing high-quality, affordable healthcare services to millions of members across the nation. With a commitment to improving the health of our members and the communities we serve, we integrate care delivery with robust health plan coverage. Our mission extends beyond medical services to encompass preventative care, community health initiatives, and groundbreaking research. At the heart of our operations lies a sophisticated technological infrastructure that supports everything from patient records and digital health platforms to complex medical devices. Protecting this critical infrastructure and the sensitive data of our members is paramount. We believe in fostering an inclusive environment where every employee can thrive and contribute to our shared mission. Joining Kaiser Permanente means becoming part of a team dedicated to excellence, innovation, and making a real difference in people’s lives, all while working to ensure the highest standards of data security and privacy. We are continually investing in cutting-edge technology and talent to stay ahead of emerging threats and uphold the trust our members place in us.
Job Description
Are you a highly motivated and skilled Cybersecurity Analyst looking for an opportunity to leverage your expertise from the comfort of your home? Kaiser Permanente is seeking a dedicated Cybersecurity Analyst to join our remote team, based out of Riverside, California. In this critical role, you will be instrumental in safeguarding our extensive network, systems, and sensitive patient data against an ever-evolving landscape of cyber threats. You will play a vital part in our comprehensive security strategy, focusing on monitoring, detecting, analyzing, and responding to security incidents. This position requires a proactive individual with strong analytical capabilities, excellent problem-solving skills, and a deep understanding of cybersecurity principles and technologies. While this is a fully remote position, candidates residing in the Riverside, California area are strongly preferred, as occasional on-site meetings or equipment pick-ups may be required (though infrequent). You will collaborate closely with a distributed team of security professionals, utilizing advanced tools and methodologies to maintain a secure and resilient environment for our members and employees. Your day-to-day will involve working with SIEM platforms, conducting vulnerability scans, supporting incident response procedures, and contributing to security awareness initiatives. If you are passionate about cybersecurity and eager to contribute to a mission-driven organization dedicated to health and well-being, we encourage you to apply. This role offers the flexibility of remote work combined with the stability and impact of working for a leading healthcare provider. Your contributions will directly protect millions of patient records and uphold the trust our members place in us daily, ensuring the integrity and confidentiality of vital health information.
Key Responsibilities
- Monitor security systems and tools for alerts, anomalies, and potential security incidents, performing initial triage and assessment.
- Perform in-depth investigation and analysis of security incidents to determine scope, root cause, and impact, collaborating with relevant teams for resolution.
- Participate in incident response activities, including containment, eradication, recovery, and post-incident analysis and reporting.
- Conduct regular vulnerability assessments, penetration testing, and security audits to identify weaknesses in systems and applications.
- Assist in the development, implementation, and enforcement of security policies, procedures, and best practices.
- Stay current with the latest cybersecurity threats, trends, and technologies, recommending proactive measures to enhance security posture.
- Collaborate with IT, development, and business units to ensure security requirements are integrated into system designs and operational processes.
- Generate comprehensive reports on security posture, incident metrics, compliance status, and recommendations for improvement.
- Provide security awareness training and guidance to internal stakeholders.
Required Skills
- Minimum of 3 years of experience in a cybersecurity role, preferably within a large enterprise or healthcare setting.
- Strong understanding of network protocols, operating systems (Windows, Linux), virtualization, and cloud security principles (Azure, AWS, GCP).
- Proficiency with Security Information and Event Management (SIEM) tools (e.g., Splunk, QRadar) for log analysis and threat hunting.
- Experience with incident response methodologies, digital forensics, and threat intelligence platforms.
- Knowledge of common attack vectors, security vulnerabilities, and defensive techniques (e.g., firewalls, IDS/IPS, endpoint protection).
- Familiarity with regulatory compliance frameworks relevant to healthcare (e.g., HIPAA, HITECH, PCI DSS, NIST CSF).
- Excellent analytical, problem-solving, and critical thinking skills with attention to detail.
- Strong written and verbal communication skills, essential for remote collaboration and documentation.
Preferred Qualifications
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related technical field.
- Relevant industry certifications such as CompTIA Security+, CySA+, CASP+, CEH, SANS GIAC certifications (e.g., GSEC, GCIH, GCIA).
- Experience with vulnerability management tools (e.g., Nessus, Qualys, Tenable.io) and application security testing (SAST/DAST).
- Scripting skills (e.g., Python, PowerShell) for security automation and data analysis.
- Prior experience working in a healthcare or other highly regulated industry.
Perks & Benefits
- Comprehensive Medical, Dental, and Vision coverage for you and your family.
- Generous Paid Time Off (PTO) and company holidays to support work-life balance.
- 401(k) retirement plan with competitive company match to help you plan for the future.
- Life and disability insurance for financial security.
- Tuition reimbursement and professional development programs to support continuous learning and career growth.
- Employee wellness programs focused on physical, mental, and financial health.
- Employee assistance program (EAP) providing confidential support services.
- Remote work flexibility with a supportive, collaborative, and diverse team environment.
- Opportunities for career advancement within a large, stable organization.
How to Apply
If you are a driven Cybersecurity Analyst ready to make a significant impact from your home office, we invite you to apply. Your expertise will be crucial in protecting sensitive data and supporting the health of millions. Please click on the application link below to submit your resume and cover letter. We look forward to reviewing your qualifications and learning how you can contribute to Kaiser Permanente’s mission of protecting our members’ health and data.