Senior Security Analyst

Accountabilities:

• Monitor and analyze security events and alerts across networks, endpoints, cloud platforms, and applications.
• Investigate suspicious activity and lead incident response activities, including triage, containment, eradication, and recovery.
• Serve as an escalation point for complex security incidents and coordinate cross-functional response efforts.
• Maintain and optimize SIEM, EDR, and other security tools to improve detection capabilities and reduce false positives.
• Conduct root cause analysis and document incidents, remediation activities, and lessons learned.
• Ensure security practices align with HIPAA, HITECH, and other applicable healthcare privacy and regulatory requirements.
• Participate in security risk assessments, gap analyses, internal and external audits, and third-party assessments.
• Develop and maintain security policies, standards, and procedures aligned with regulatory and industry expectations.
• Monitor controls designed to protect PHI, manage data access, and prevent security breaches.
• Support audit readiness and remediation of compliance findings.
• Conduct vulnerability scans and coordinate remediation with infrastructure and application teams.
• Prioritize vulnerabilities based on business impact, exploitability, and regulatory exposure, and track progress toward risk reduction.
• Perform risk assessments for new systems, vendors, and technology implementations.
• Contribute to third-party risk management and vendor security reviews.
• Collaborate with infrastructure and application teams on secure configurations, security controls, and system implementations.
• Evaluate and recommend security technologies and solutions that strengthen the organization's protection capabilities.
• Support secure design reviews for applications, systems, and integrations and validate security controls across network, endpoint, and cloud environments.
• Review and monitor access to systems containing PHI and sensitive information, supporting provisioning, deprovisioning, and periodic access reviews.
• Investigate access anomalies and promote least-privilege access principles.
• Support security awareness and training initiatives focused on healthcare threats such as phishing and ransomware.
• Advise IT and business teams on security best practices and risk mitigation.
• Identify opportunities to improve security processes, tools, monitoring, and response capabilities.
• Mentor junior security analysts and contribute to the growth and development of the security function.

Requirements:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field preferred; equivalent professional experience may be considered.
• 5+ years of experience in cybersecurity, information security, or a related field.
• At least 2 years of experience in healthcare IT, cybersecurity, or another regulated environment.
• Demonstrated experience with incident response, threat detection, vulnerability management, and security operations.
• Experience supporting security audits and compliance programs in regulated industries.
• Strong knowledge of SIEM, EDR, security monitoring, and log analysis.
• Strong understanding of network security concepts, including firewalls, IDS/IPS, and network segmentation.
• Experience with endpoint security and device hardening.
• Understanding of cloud security principles across Azure, AWS, or comparable platforms.
• Experience with vulnerability scanning and remediation tools.
• Knowledge of HIPAA Security and Privacy Rules and familiarity with NIST Cybersecurity Framework and/or NIST 800-53.
• Familiarity with HITRUST CSF is preferred.
• Knowledge of identity and access management practices and least-privilege principles.
• Understanding of secure system and application design principles.
• Strong analytical and problem-solving skills, with the ability to assess complex security threats and determine appropriate responses.
• Ability to lead incident response activities with urgency, sound judgment, and composure.
• Excellent written and verbal communication skills, including security documentation and reporting.
• Strong attention to detail and ability to manage multiple priorities in a fast-paced environment.
• Ability to collaborate effectively with IT, compliance, legal, business, and external stakeholders.
• High level of integrity and discretion when working with sensitive and confidential information.
• CISSP, CISM, or CISA certification is strongly preferred; CEH, Security+, or GIAC certifications are beneficial.
• Experience with healthcare systems such as EHR/EMR platforms, including Epic or Cerner, is a plus.
• Experience with ransomware preparedness and response in healthcare environments is desirable.
• Familiarity with Microsoft security technologies such as Defender, Sentinel, and Entra ID, or comparable platforms, is preferred.
• Experience supporting HITRUST certification or attestation is a plus.

Benefits:

• Annual salary range of $110,000–$120,000 USD.
• Fully remote position within the United States.
• Purpose-driven work supporting the protection of sensitive healthcare information and systems.
• Patient-focused, collaborative work environment.
• Opportunities to contribute to cybersecurity strategy, compliance, and continuous improvement.
• Opportunity to mentor and develop junior security professionals.
• Supportive environment focused on collaboration, accountability, and professional growth.
• Comprehensive benefits and employee support programs.
• Reasonable accommodations available throughout the application and employment process.