Security Analyst

About the role

The Security Analyst owns the day-to-day analytical and coordination workload across security operations, vulnerability management, identity governance, incident response support, audit readiness, and security control monitoring. The role acts as an execution partner to the Security Manager, providing operational depth, disciplined follow-through, and clear escalation. Management retains accountability for security strategy, architecture decisions, material risk acceptance, and executive governance. This role supports the confidentiality, integrity, and availability of systems that process sensitive healthcare information for more than 2,900 ambulatory surgery centers nationwide.

Responsibilities

• Maintain accurate documentation of procedures, investigations, and recurring security operations tasks
• Prepare clear operational reporting on security events, vulnerabilities, cloud and SaaS risk indicators, incident trends, remediation status, and control coverage
• Support SOC 2, HITRUST, HIPAA, client security request, and audit readiness activities through evidence collection, control testing support, documentation, and issue follow-up
• Coordinate vulnerability prioritization, remediation tracking, exception documentation, and closure validation with IT, DevOps, development, and applicable system owners
• Validate security control coverage and configuration effectiveness, identify gaps, and coordinate with control owners to support timely risk reduction and remediation
• Participate in security reviews of product changes, cloud deployments, vendor integrations, and technical designs by identifying gaps, documenting findings, and escalating material risk to the Security Manager
• Prepare concise findings, risk summaries, and remediation recommendations for review by the Security Manager and CISO
• Conduct initial incident triage and investigation. Collect and preserve relevant evidence, document findings, and coordinate escalation, containment, and remediation activities under established incident response procedures
• Support identity governance activities, including user access reviews, privileged access reviews, MFA and conditional access validation, service account reviews, and termination and offboarding checks
• Monitor, analyze, and triage security alerts, anomalous activity, vulnerabilities, suspicious access, and potential data exposure events across cloud, SaaS, endpoint, network, and identity environments

Qualifications

• Three to five years of experience in security operations, systems administration, network administration, cloud administration, or similar technology environments; healthcare IT or SaaS experience preferred
• Hands-on experience with security monitoring, incident triage, vulnerability management, log analysis, identity security concepts, cloud security concepts, data protection, and audit support
• Working knowledge of HIPAA-related security and privacy expectations, SaaS or healthcare technology environments, third-party risk, and secure handling of sensitive data
• Ability to work independently on assigned operational priorities while escalating material risks, blockers, and decisions requiring management direction
• Strong written and oral communication and documentation skills, with the ability to translate technical findings into concise risk and remediation summaries for technical and non-technical stakeholders
• Perform other duties as assigned

Skills

• Security, cloud, or incident response certification preferred (such as Security+, CySA+, AZ-500, or GCIH), or ability to achieve a relevant certification within the first year

Benefits

• Medical
• Vision
• Dental
• Short Term Disability
• Long Term Disability
• Life Insurance
• Vacation/Sick time
• 401(k) retirement plan with company match
• Paid Holidays
• SIS Cares Day
• Hybrid or Remote environment depending on the role