Jason Forry- Cyber Security Officer/CSIRT Analyst

Background

I joined the HSE in 2022 as a Cybersecurity FIT apprentice in the Cyber Defence team. The FIT apprenticeship is a national programme designed to equip apprentices with the latest skills to meet the growing demands of the tech industry.

After completing my two-year apprenticeship, I was offered a role as a CSIRT Analyst in the newly established Computer Security Incident Response Team (CSIRT). We are a growing team of more than ten professionals, working closely with multiple teams across the HSE—including NSD, Cyber Defence, Incident Management, the CTO’s Office, and Security Operations—to coordinate and respond to cyber incidents. I’m based in Co. Sligo, in the west of Ireland.

Working Life

My day-to-day work revolves around monitoring incidents on our Cyber Threat Intelligence platforms and collaborating with various teams across the HSE to investigate and respond to cyber threats. I also stay up to date with the latest cybersecurity trends impacting the healthcare sector.

As a first responder to potential cyber incidents, I assess, analyse, and classify security events based on severity—high, medium, or low—before coordinating with both our internal CSIRT team and wider HSE teams to mitigate risks and secure systems.

Impact on Patient Care

Cybersecurity plays a critical role in ensuring patient care isn’t disrupted. The CSIRT safeguards the digital backbone of modern healthcare, preventing, detecting, and responding to cybersecurity threats that could impact critical systems such as:

• Electronic Health Records (EHRs)
• Diagnostic tools and imaging systems
• Medical devices and hospital networks

By protecting these essential systems, we help keep routine check-ups, emergency treatments, and life-saving surgeries running smoothly. We also work to protect patient data, ensuring that personal and medical information remains secure and that trust between patients and healthcare providers is maintained.

And when a cyber crisis does occur—whether it’s a phishing attack, ransomware incident, or data breach—CSIRT acts swiftly to minimise the impact and restore operations, allowing healthcare staff to focus on what matters most: delivering safe and uninterrupted care.

Challenges

One of our biggest challenges as a newly formed CSIRT is building awareness across the HSE. With thousands of staff working in hospitals, clinics, and offices, cybersecurity isn’t always top of mind when people think of healthcare. But in reality, our work underpins so many critical operations—from securing patient records to keeping essential systems running.

Raising awareness and ensuring staff know who we are and how we can support them is key to our success. It’s not just about responding to cyber threats; it’s about becoming a trusted partner across the HSE—helping staff feel confident that they are working in a secure digital environment.

Motivation

What makes working in cybersecurity for healthcare so rewarding is the real-world impact. Every day, I’m not just analysing security threats—I’m helping to protect the systems that enable hospitals, clinics, and healthcare professionals to do their jobs safely and efficiently.

Knowing that our efforts help frontline staff focus on patient care—without the added worry of cyber threats—is a huge motivator. The combination of technical challenges and meaningful impact makes this role incredibly fulfilling.

Hobbies and Interests

Outside of work, I’m passionate about kickboxing, football, and all things tech. Kickboxing keeps me focused—it’s a great way to stay sharp after a long day. When it comes to football, I’m a big Arsenal fan, and whether it’s watching the games or playing a casual match with friends, I enjoy the highs and lows of supporting my team.

I’m also a tech enthusiast, always exploring new gadgets and emerging technologies. These hobbies help me stay balanced, energized, and ready for whatever challenges come next.