Job Title : Security Analyst – Security Operations & Incident Response

Position Overview

Help strengthen enterprise cybersecurity through hands-on security monitoring, incident response, threat hunting, and compliance support. This role contributes to protecting information systems and networks by identifying potential threats, investigating suspicious activity, evaluating security risks, and supporting the implementation and improvement of security controls.

You will collaborate with technical teams, business stakeholders, leadership, and vendors to support security operations and compliance initiatives. The role also involves analyzing security solutions and processes, communicating findings, and helping address information security risks in a results-oriented environment.

What You'll Do / Key Responsibilities

• Support day-to-day Security Operations Center (SOC) monitoring activities, tools, and processes.
• Provide hands-on support for security tools and technologies.
• Monitor security technologies for alerts, anomalies, and potential threats.
• Conduct targeted threat hunts to identify evidence of compromise.
• Investigate security incidents, gather evidence, and analyze relevant data.
• Analyze anomalous activity and potential threats affecting connected resources.
• Support information security risk management and incident response activities.
• Assess and evaluate information security solutions, processes, and controls.
• Contribute to the establishment, implementation, and enhancement of information systems security and compliance efforts.
• Collaborate with technical staff, leadership, business partners, vendors, and other stakeholders to support security and compliance risk mitigation.
• Provide technical input to support the design and implementation of secure information technology systems and networks.
• Help identify and address security risks and support the response to information security issues.
• Communicate findings, assigned-work status, and relevant security processes clearly to technical and business stakeholders.

Required Qualifications

• High school diploma with at least six years of relevant work experience in security analysis.
• Hands-on experience or an educational background in IT System Security or System Administration.
• Experience with information security incident response procedures and practices.
• Intermediate proficiency with Microsoft Office products, including Word, Excel, PowerPoint, and Visio, including the use of templates and style guidelines for branding consistency.
• Strong understanding of enterprise operations and secure best practices.
• Strong written and verbal communication skills.
• Ability to work independently and collaboratively as part of a team.
• Ability to collaborate and coordinate with multiple teams and vendors.
• Ability to multitask, prioritize assignments, meet deadlines, and communicate the status of assigned work.
• Willingness to learn, take on new tasks, and adapt to changing priorities.
• Ability to understand, retain, and communicate processes and to respond constructively to feedback and changing requirements.

Preferred Qualifications

• Bachelor's degree in information technology, computer science, or a related technical field, with a minimum of three years of relevant work experience.
• Information security certifications such as CompTIA, ISC(2), SANS GIAC, CCNA Security, or similar.
• Prior Health Information Technology experience.
• Centralized Log Management experience.
• Familiarity with information security regulatory requirements and standards, including the NIST 800 series and ARC-AMPE.
• Experience performing or supporting information security compliance assessments and audits.
• Work or consulting experience in federal, state, city, or local government.
• Experience or knowledge of security operations environments, including SOC monitoring, alert triage, incident investigation, and security dashboards.
• Experience or knowledge of vulnerability assessments, including scanning, analysis of results, and manual validation.
• Familiarity with security technologies such as SIEM systems, network firewalls, and IDS/IPS.
• Knowledge of operating systems, networks, cloud computing, hardware and software platforms, and protocols as they relate to information security.
• Working knowledge of TCP/IP and network analysis tools such as Wireshark and tcpdump.
• Familiarity with security frameworks and controls such as CMS ARC-AMPE, NIST, COBIT, and FedRAMP.
• Experience or knowledge of Risk Management Framework (RMF) tasks and artifacts integrated into the System Development Life Cycle (SDLC).
• Knowledge of defense-in-depth principles, including secure system configuration, network segmentation, and malicious code protection.
• Experience or knowledge related to security in multi-tenant cloud services and vendor interface management.
• Hands-on experience implementing, operating, and maintaining secure computer systems, software, hardware, and networks.