Overview
Skills
Job Details
Role: Cybersecurity Analyst
Location: Remote
Duration: Long Term
HCL Healthcare is seeking a skilled Cybersecurity Analyst to ensure the confidentiality, integrity, and availability of enterprise healthcare IT systems, applications, and data. This role involves monitoring, detecting, analyzing, and responding to security events, conducting vulnerability and risk assessments, implementing security controls, and supporting compliance with federal information security policies and healthcare data protection standards (FISMA, NIST 800-53, FedRAMP, HIPAA).
Key Responsibilities:
Security Monitoring & Incident Response
Monitor SIEM tools, dashboards, and alerts for threats, anomalies, or suspicious activities.
Perform triage, containment, eradication, and recovery as part of the incident response process.
Conduct root cause analysis and provide documentation with recommendations for prevention.
Vulnerability & Risk Management
Conduct regular vulnerability scans and work with system/application owners to remediate findings.
Participate in security risk assessments and risk management reviews.
Compliance & Governance
Ensure compliance with federal mandates and healthcare security frameworks (FISMA, NIST 800-53, FedRAMP, HIPAA, OMB).
Prepare and maintain documentation for Authority to Operate (ATO), POA&Ms, and continuous monitoring reports.
Security Tools & Process Improvement
Support deployment, tuning, and optimization of security tools (SIEM, endpoint protection, IDS/IPS, vulnerability management, DLP).
Recommend enhancements to security posture, processes, and automation.
Awareness & Collaboration
Assist in developing security awareness and training programs.
Participate in tabletop exercises, security drills, and audits.
Work closely with IT, applications, and network teams to embed security throughout system lifecycles.
Required Qualifications:
Bachelor s degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
3+ years of hands-on experience in cybersecurity or information security roles.
Strong background in security monitoring, incident response, and vulnerability management.
Familiarity with NIST 800-53, RMF, CIS Controls, HIPAA, and federal compliance requirements (FISMA, FedRAMP).
Excellent analytical, problem-solving, and documentation skills.
U.S. Citizenship required (federal contract requirement).
Preferred Qualifications:
Industry certifications such as Security+, CEH, CySA+, CISSP (or in progress).
Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel), endpoint security, and cloud security controls (AWS, Azure).
Knowledge of scripting/automation (PowerShell, Python) for security analysis and reporting.