> Markdown version of [/jobs/ext/2081897-consulting-security-analytics-architect](https://www.wearedevelopers.com/jobs/ext/2081897-consulting-security-analytics-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Consulting Security Analytics Architect - **Company:** HCA Healthcare Inc. - **Location:** Nashville, TN, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** BigQuery, Cloud Computing, Cyber Security, Query Languages, Infrastructure as a Service (IaaS), Intrusion Detection and Prevention, Python (Programming Language), Machine Learning, Platform as a Service (PAAS), Kusto Query Language, Security Information and Event Management, SQL Databases, Scripting, Mitre Att&ck, Cyber Threat Analysis, Data Analytics, Splunk - **Published:** August 16, 2026 - **Apply:** https://www.juju.com/job/00000000gnd8b3 ## About the Role The ideal candidate will have extensive experience developing security analytics for Cybersecurity, Insider Threat or Fraud use cases and be familiar with advanced detection engineering concepts such as Risk-Based Alerting (RBA) and Detection-as-Code (DaC). The candidate should possess familiarity with one or more of the following areas: Cloud (IaaS/PaaS), Network, Endpoint, Container and Orchestration, and IoT. The candidate should also be able to communicate threat detection concepts effectively with external teams and stakeholders. + Researches emerging threat TTPs and IOAs using threat intelligence and the MITRE ATT&CK framework, and designs scalable detection solutions to ensure the organization remains protected against new and evolving threats. + Demonstrates proficiency in multiple scripting and query languages, including Python, Splunk query language (SPL), Kusto query language (KQL) and GCP BigQuery / SQL., + Bachelors Degree preferred + Seven or more years in a security data analytics or data science role Knowledge, Skills, Abilities, Behaviors: + **Service and Quality Excellence:** Ability to demonstrate an uncompromising commitment to delivering exceptional care to create an unmatched value proposition for our patients. Required + **Honor our Mission and Values** : Ability to build trust and act with authenticity to cultivate a culture of integrity, inclusion, and mutual respect. Required + **Effective Decision Making** : Ability to make timely, informed decisions that are in the best interest of our patients, employees, providers, community and HCA. Required + **Attain and Leverage Strategic Relationships** : Ability to develop and strengthen collaborative relationships with both internal and external stakeholders to advance the care of our patients and the growth of HCA. Required + **Lead and Develop Others** : Ability to lead others to accomplish organizational goals and objectives; provide meaningful coaching and mentoring to increase the capabilities of individuals and teams and drive employee engagement. Required + **Communicate with Impact** : Ability to deliver information in a clear, concise, and compelling manner to effectively engage others and achieve desired results. Required + **Achieve Success through Change** : Ability to identify opportunities for improvement and innovation, remove barriers and resistance, and enable desired behaviors. Required + **Drive Execution and Financial Results** : Ability to commit to the success and financial wellbeing of HCA by challenging others to excel and hold themselves and others accountable for achieving results. Required ## Description As a Consulting Security Analytics Architect, you will serve as a subject matter expert (SME) in developing advanced security analytics to help detect and mitigate emerging cyber threats. You will play a key role in maximizing the effectiveness of the SIEM and security data analytics platforms, while also providing thought leadership and mentoring to a team of engineers responsible for developing signature-based and behavior-based threat detections., + Applies machine learning (ML) models and statistical methods to enhance detection capabilities. + Identifies data enrichment opportunities to add valuable contextual information to detections. + Identifies tuning opportunities to reduce false positives while increasing detection efficacy. + Enhances and maintains CI/CD pipelines to ensure efficient, high-quality and rapid deployment of detection content. + Conducts threat hunting activities as part of the detection research and development process. + Collaborates with the Threat Intelligence team to assess cyber threat intelligence and drive threat informed defense. + Participates in purple teaming and threat modeling exercises to identify new high value detections as well as gaps with existing detections. + Performs other duties as assigned ## Related Videos - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Making Data Warehouses fast. A developer's story.](https://www.wearedevelopers.com/videos/302-making-data-warehouses-fast-a-developer-s-story) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)