Drexel Co-Op : Security Analyst

NBME is proud to partner with Drexel University and give students the opportunity to utilize the skills they have learned in the classroom and leverage them in an educational setting.

NBME offers a versatile selection of high-quality assessments and educational services for students, professionals, educators, regulators and institutions dedicated to the evolving needs of medical education and health care. To ensure our assessments meet the highest standards of quality, stay relevant and align to the current curriculum in medical schools and training programs, we rely on a wide network of collaborators. These include the volunteers who help develop our exam questions, the committees and panels who represent various groups within the medical education community, external researchers and health profession organizations.

NBME views diversity, equity and inclusion (DEI) as foundational and enduring to our strategy and vision. We continue to focus on ensuring that our DEI work is impactful and ingrained in everything we do, including with our staff, culture, products and services, the Philadelphia community and the broader medical education landscape. Our commitment manifests in our hiring and staff development, recruitment for committees, grants programs, design and review of our assessments, and involvement in our local and national communities.

Learn more about NBME at NBME.org.

Co-ops must be located in the tri-state area of PA, DE, or NJ for the duration of the Co-op experience.

Position Description :

• Evaluate, learn, and administer industry relevant, highly advanced security tools.
• Investigate security alerts from Red Canary Managed Detect & Response service for false positives and true positives.
• Perform incident response based on incident type and following procedures.
• Administer Wombat security awareness education platform.
• Learn to perform security assessments including servers, network, and applications. Report on findings and track remediation.
• On-board applications, accounts, and access entitlements using Identity, Governance and Lifecycle (IGL) management technology for centralized visibility of access to applications.
• Assist with implementation of automating joiner, mover, and leaver access workflows.
• Administer access reviews with data owners using same IGL technology.
• Gather and report on security metrics. Perform analysis such as pareto charts.

Qualifications :