Security Analyst - Security Operations & Incident Response

Support incident response procedures, information security risk assessments, and remediation activities. Evaluate security solutions, processes, and controls to identify improvement opportunities. Help implement and maintain information security controls and compliance requirements. Provide technical input on secure IT systems, networks, and infrastructure. Collaborate with internal teams, business stakeholders, leadership, and vendors to mitigate security risks. Support security assessments, audits, and compliance initiatives. Document investigation findings, communicate security issues, and provide timely updates on assigned work. Required Qualifications High school diploma with at least 6 years of relevant security analysis experience. Hands-on experience or educational background in IT system security or system administration. Experience with information security incident response procedures and practices. Strong understanding of enterprise IT operations and security best practices. Intermediate proficiency with Microsoft Word, Excel, PowerPoint, and Visio, including templates and formatting standards. Strong written and verbal communication skills. Ability to work independently and collaboratively across teams. Experience coordinating with multiple technical teams, business stakeholders, and vendors. Ability to manage multiple assignments, prioritize tasks, meet deadlines, and communicate progress. Willingness to learn new technologies, adapt to changing priorities, and respond constructively to feedback. Preferred Qualifications Bachelor’s degree in Information Technology, Computer Science, or a related technical field, with at least 3 years of relevant experience. Security certifications such as CompTIA Security+, ISC2 certifications, SANS GIAC, CCNA Security, or equivalent. Experience in healthcare IT or government environments. Experience with centralized log management, SIEM platforms, security dashboards, alert triage, and incident investigation. Familiarity with security technologies such as network firewalls, IDS/IPS, and vulnerability scanning tools. Experience supporting vulnerability assessments, analyzing scan results, and manually validating findings. Knowledge of security standards and frameworks, including NIST 800 series, CMS ARC-AMPE, COBIT, and FedRAMP. Experience supporting information security compliance assessments and audits. Knowledge of Risk Management Framework (RMF) activities and artifacts within the System Development Life Cycle (SDLC). Understanding of TCP/IP, network protocols, and network analysis tools such as Wireshark and tcpdump. Knowledge of operating systems, networking, cloud computing, and hardware and software platforms. Understanding of defense-in-depth principles, secure system configuration, network segmentation, and malicious code protection. Familiarity with security in multi-tenant cloud environments and vendor interface management. Hands-on experience implementing, operating, and maintaining secure systems, software, hardware, and networks.