Cyber Security Analyst

About the role

This role is responsible for monitoring, investigating, and responding to security alerts. Responsible for helping defend the organization’s information and technology. The position operates in a professional office setting within a healthcare facility, involving prolonged sitting at a desk, occasional walking, standing, bending, or lifting light office items (up to 25 pounds), visual acuity to view computer screens and read detailed documents, and the ability to communicate effectively in person, by phone, and electronically. The employee may be present in clinical areas and may be exposed to infectious diseases, with appropriate training and personal protective equipment (PPE) provided as needed.

Responsibilities

• Monitor and triage security alerts from platforms such as Office 365, Defender, and Managed Detection Response (MDR) applications.
• Correlate logs across endpoints, servers, firewalls, proxies, and cloud services to identify potential threats.
• Investigate events and determine appropriate containment or escalation actions.
• Perform containment steps for low to moderate-risk incidents (isolating endpoints, revoking sessions, disabling compromised accounts).
• Escalate confirmed or high-impact incidents to senior cyber security team members.
• Document findings, actions, and outcomes in case management systems.
• Apply threat intelligence to proactively identify indicators of compromise across systems.
• Support Active Directory role-based access control (RBAC) initiatives by flagging misalignments and risks.
• Participate in tuning alerts, improving detection logic, and suggesting automation opportunities.
• Collaborate with help desk and IT support to notify impacted users or clarify false positives.
• Provide feedback from frontline experiences to improve security policies and response playbooks.
• The employee supports the hospital mission, vision, values, policies, and procedures.
• Participates in required education for DNV programs as applicable to position.
• Performs other related duties as assigned.

Qualifications

• Education Required: High School Diploma or equivalent. Preferred: Bachelor’s degree.
• Licenses/certifications/registrations Required: NA. Preferred: CompTIA Security+ or equivalent.
• Experience Required: 1-2 years in a security operations or IT security role (Tier 1 or 2 level). Familiarity with SIEM platforms—especially Microsoft Sentinel—and endpoint tools like Microsoft Defender. Experience using or supporting security case management tools (e.g., GreyMatter or equivalent MDR solutions). Knowledge of phishing analysis, endpoint detection and response (EDR) actions, user access review, and AD structures. Intermediate familiarity with Microsoft Cloud applications (O365, Defender, Intune, Azure AD, Entra ID). Strong documentation and communication skills.
• Preferred: Healthcare experience or understanding of HIPAA‑compliant environments.
• Other: Must be a self‑starter. Strong interpersonal and problem‑solving skills. Detail‑oriented, organized, and highly motivated. Positive attitude, great teamwork mindset, and a willingness to assist wherever needed.

Benefits

• Medical
• Dental
• Vision

Pay

Minimum: $108,201.60 per year; Maximum: $204,958.80 per year.

Schedule

40 hours per week.