Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the primary responder for security concerns reported by users, including alerts, incidents, and potential breaches across Azure, Microsoft 365, EHR platforms, and associated systems.

• Conduct initial triage, investigation, containment, and response actions, escalating intricate issues to Cybersecurity Engineers or the Cybersecurity Architect.

• Monitor security tools and systems to detect suspicious activities, vulnerabilities, and emerging threats.

• Participate in a designated on-call rotation for critical incidents.

• Execute security assessments, vulnerability scans, and risk evaluations.

• Document findings and monitor remediation efforts until resolution.

• Support compliance and security initiatives in accordance with NIST, HIPAA, CIS Critical Security Controls v8, and other industry best practices.

• Identify, assess, and mitigate security risks within the organization.

• Manage, monitor, and validate access controls, authentication mechanisms, and secure configurations across cloud and network environments.

• Collaborate with internal IT teams and partner health centers to enhance security operations.

• Work alongside Cybersecurity Engineers and the Cybersecurity Architect on investigations, remediation efforts, and research initiatives.

• Maintain communication through the established chain of command and provide updates during active incidents.

• Stay updated on emerging threats, cybersecurity trends, and industry best practices.

• Assist in the development and enhancement of security policies, procedures, and operational standards.

• Contribute to ongoing cybersecurity and compliance initiatives.

• Perform additional duties and responsibilities as assigned.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.

• 2 to 5 years of experience in cybersecurity, information security, IT operations, or a related technical role.

• Practical experience with security operations, incident response, vulnerability management, or risk management.

• Strong knowledge of SIEM, EDR, firewalls, vulnerability management tools, and incident response methodologies.

• Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, and HIPAA.

• Excellent analytical and problem-solving abilities.

• Outstanding documentation skills with a keen attention to detail in tracking findings, evidence, and remediation activities.

• Capability to effectively communicate technical information to both technical and non-technical audiences.

• Ability to work autonomously and discern when to escalate issues to senior cybersecurity personnel.

• Preferred: Associate-level cybersecurity certifications such as Security+, CySA+, SC-900, or similar credentials.

• Preferred: Experience with Microsoft Azure security technologies and Microsoft 365 security solutions.

• Preferred: Familiarity with SentinelOne, Fortinet, or similar tools.

• Preferred: Experience in supporting healthcare or other highly regulated environments.

• Commitment to continuous professional development and maintaining relevant security certifications.

🏝️ Benefits

• 100% Remote Work – Work from anywhere within the United States.

• 100% Employer-Paid Medical Insurance.

• Annual $1,500 HSA Contribution.

• Generous Paid Time Off (PTO).

• 403(b) Retirement Plan with Employer Contribution.

• Professional Development & Education Assistance.

• Training, certifications, and educational opportunities.

• Mission-Driven Culture.