Get to know Summit Pacific Medical Center:

Your trusted partner in Health and Wellness, Summit Pacific is a vibrant and expanding public hospital district that operates a Critical Access Hospital with a Level IV trauma designation, three rural healthcare clinics, and a seven-day-a-week urgent care clinic. Our vision is “Through Summit Care, we will build the healthiest community in the Nation.” Our hospital is unique due to its size and accessibility. We pride ourselves on our ability to give patients quick access to a provider.

• Critical Access Hospital
• 24/7 Emergency Department
• Level II Cardiac Center
• Level III Stroke Center
• Level IV Trauma Care

To learn more about Summit Pacific, visit www.summitpacificmedicalcenter.org

Pay Range (depending on experience):

.

Job Summary

The Network & Security Analyst I provides cybersecurity operations, network administration support, and technical security services for Summit Pacific Medical Center. The position serves as an internal technical resource for cybersecurity operations and works collaboratively with IT leadership, managed security providers, a future Security Operations Center, vendors, and organizational stakeholders to protect organizational information systems and technology resources.

The position supports security monitoring and investigation, vulnerability management, security assessments, incident response, remediation, security auditing, and cybersecurity technologies. The Analyst also supports network infrastructure operations and projects and develops cross functional competency to serve as a secondary resource and backup for defined network administration responsibilities.

Job Duties and Responsibilities

1. Serve as an internal technical resource for cybersecurity operations and coordinate with the future managed Security Operations Center, security vendors, and other technology partners.

2. Review, investigate, document, respond to, and appropriately escalate cybersecurity alerts and events using available security tools, logs, network information, endpoint data, and other technical evidence.

3. Participate in cybersecurity incident response, including investigation, containment, remediation, recovery, documentation, and post incident activities.

4. Perform vulnerability scanning, analysis, prioritization, remediation tracking, and validation across supported technology environments.

5. Perform or participate in authorized vulnerability assessments, penetration testing, technical security assessments, and security control validation.

6. Coordinate identified security findings and remediation activities with internal technical resources, vendors, and other responsible stakeholders through resolution.

7. Perform technical security audits and support cybersecurity risk assessments, HIPAA security activities, evidence collection, investigations, and other security and compliance requirements.

8. Assist with administration, maintenance, and improvement of cybersecurity technologies including security information and event management, endpoint security, vulnerability management, identity security, network security monitoring, firewalls, and related platforms.

9. Support enterprise network operations, maintenance, troubleshooting, upgrades, and infrastructure projects.

10. Serve as a secondary technical resource for defined network administration responsibilities and develop cross functional competency to provide backup coverage and operational continuity.

11. Assist with administration and troubleshooting of switches, firewalls, wireless networks, WAN connectivity, VPNs, VLANs, network segmentation, and related network technologies.

12. Perform approved network configuration changes, maintenance, firmware and security updates, monitoring, and troubleshooting within assigned areas of responsibility.

13. Participate in network modernization, infrastructure lifecycle, cybersecurity, and other technology projects, including implementation, testing, documentation, and troubleshooting.

14. Coordinate with managed security providers, technology vendors, consultants, and other third parties during investigations, assessments, implementations, upgrades, and remediation activities.

15. Maintain accurate technical documentation including security procedures, investigation records, network documentation, diagrams, configurations, inventories, standards, and job aids.

16. Follow established change control, testing, implementation, documentation, communication, access control, and security processes.

17. Maintain awareness of cybersecurity threats, vulnerabilities, technologies, and industry practices and participate in ongoing technical training and cross training.

18. Provide technical guidance and knowledge sharing within areas of demonstrated competency and perform other related duties and special projects as assigned.

Organizational Responsibilities

In addition to the duties and responsibilities listed above, all employees are expected to support the Summit Pacific Medical Center mission, vision and values; comply with SPMC policies and procedures; and conduct themselves in an ethical, professional, respectful, and collaborative manner at all times.

Required Education and Experience

1. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technology discipline.

2. One (1) to three (3) years of progressively responsible experience in information technology, cybersecurity, network administration, systems administration, technical systems support, or a related technology environment; or an equivalent combination of education, training, certifications, and experience.

3. Foundational knowledge of networking, operating systems, cybersecurity principles, and enterprise technology.

4. Demonstrated technical troubleshooting, analytical, communication, and documentation skills.

5. Ability to appropriately handle confidential, sensitive, privileged, and security related information.

Preferred Education and Experience

1. Healthcare or other regulated industry technology experience preferred.

2. Experience with enterprise networking, cybersecurity technologies, security information and event management, vulnerability management, endpoint security, or managed security services preferred.

3. Experience with security investigations, vulnerability assessments, security auditing, penetration testing, or remediation activities preferred.

4. Relevant cybersecurity, networking, Microsoft, Cisco, Fortinet, CompTIA, ISACA, or comparable industry certifications preferred.

Required Knowledge, Skills and Abilities

1. Working knowledge of cybersecurity principles, vulnerability management, incident response, access controls, and secure network practices.

2. Foundational knowledge of TCP/IP, DNS, DHCP, routing, switching, VLANs, VPNs, wireless networking, firewalls, and network segmentation.

3. Ability to analyze security alerts, system logs, network activity, endpoint information, and other technical evidence.

4. Strong analytical, investigative, troubleshooting, organizational, and problem solving skills.

5. Ability to learn and effectively use complex security, network, infrastructure, cloud, and enterprise information systems.

6. Ability to maintain accurate documentation and appropriately protect confidential information, privileged credentials, security configurations, and investigative evidence.

7. Professional written and verbal communication skills and the ability to work effectively with technical staff, healthcare professionals, leadership, vendors, consultants, and managed security providers.

8. Ability to work independently within assigned responsibilities, prioritize competing needs, and appropriately escalate complex or high risk issues.

9. Ability to continuously develop technical competency through hands on experience, cross training, education, and professional development.

On Call and Incident Response

The position may participate in scheduled on call coverage and may be required to respond to significant cybersecurity, network, or infrastructure incidents outside normal business hours in accordance with departmental procedures. The organization's future managed 24-hour Security Operations Center will provide continuous cybersecurity monitoring; however, this position may serve as an internal technical escalation resource when local investigation, coordination, containment, remediation, or recovery activities are required.

Physical Requirements

• Lifting Occasional (10-30% of the time)
• Lifting 10-35lbs: Occasional (10-30% of the time)
• Lifting > 35lbs: Seldom (1-10% of the time)
• Carrying Occasional (10-30% of the time)
• Carrying 10-35lbs: Seldom (1-10% of the time)
• Carrying > 35lbs: Seldom (1-10% of the time)
• Pushing/Pulling: Seldom (1-10% of the time)
• Sitting: Frequent (30-70% of the time)
• Standing: Frequent (30-70% of the time)
• Walking: Frequent (30-70% of the time)
• Bending/Stooping: Frequent (30-70% of the time)
• Crouching: Seldom (1-10% of the time)

Sensory Requirements

• Vision: Within normal range, with or without corrective devices
• Hearing: Within normal range, with or without corrective devices
• Speech: Within normal range, with or without corrective devices

FTE:

Work Shift:

Working Location:

Benefits:

Our uniquely designed benefits are here to support you and your family in staying well, growing professionally and achieving financial security!

We take care of you, so you can focus on delivering our mission of caring for everyone, especially the most vulnerable in our communities.

Benefits offered by SPMC:

• Competitive Compensation
• Medical
• Prescription
• Dental (including Orthodontia)
• Vision
• Healthcare FSA and daycare FSA
• Daycare subsidized benefit
• Life Insurance
• Accidental Death and Dismemberment (AD&D)
• Short- and long-term disability
• Generous employer 403b match contributions for retirement
• 457 retirement account for additional funds
• Employee Assistance Program (EAP)
• Tuition reimbursement
• Smoking Cessation Assistance
• Employee Wellness Program
• Employee Committees to participate in such as Spirit Team
• Beautiful on-site gym for employees
• Instructor led fitness classes for employees, including Yoga, Kettlebells and Bootcamps
• Walking trails on site

Additional Information:

• Summit Pacific is a vibrant and expanding nonprofit public hospital district serving east Grays Harbor County, Washington. Founded in 1982, Summit Pacific now operates three locations comprised of a critical access hospital, primary care clinics, an urgent care clinic and range of ancillary and specialty services.
• Far enough to have privacy and enjoy the small-town lifestyle, yet close enough to have the benefits of the city. There are many year-round recreational activities in and around Grays Harbor such as:
• Hiking/ walking trails – whether you’re looking for short easy walking trails or long hikes you can find many trails located either on site or just miles from Summit Pacific. There are many great hiking trails about an hour away at the Quinault Rainforest which is also the home of some of the largest trees in the world!
• Kayaking – There are many areas that are easily accessible and have beautiful views.
• Nature viewing – Multiple whale watching towers and tours, state parks, Olympic Game Farm (where you can feed the animals straight from your car)
• Fishing & Hunting – If you’re looking for areas to hunt/ fish or looking for guided tours this is a great area! Westport is just 42 miles away with many opportunities to catch or buy fresh fish off the docks!
• Other activities – Multiple museums, winery, arcades, rentable mopeds, Seabrook (vacation beach town), many areas to surf for experienced surfers and surfing lessons for those who want to learn.
• Nearby colleges – Grays Harbor College is a community college located in Aberdeen with other community colleges located in surrounding areas, as well as some state colleges and universities in other areas of WA state.

Summit Pacific Medical Center is an equal opportunity provider and employer that is committed to a policy of non-discrimination on the basis of race, sex, age, religion, color, national origin, ancestry, disability, marital status, arrest and court record, sexual orientation, and status as a covered veteran. This policy covers admission and access to, and participation in, treatment and employment in the hospital’s programs, activities, services, and employment.

This organization participates in E-Verify. E-Verify is a service that verifies authorization to work in the U.S. through the U.S. Department of Homeland Security (DHS) and the U.S. Department of Social Security (SSA). For further information on E-Verify contact DHS at 1-888-464-4218.