Security Analyst

• Monitor cybersecurity tools, SOC alerts, network activity, and potential security threats.
• Investigate security incidents, analyze logs, collect evidence, and support incident response activities.
• Conduct threat hunting, vulnerability scanning, analysis, and risk assessments.
• Support SIEM platforms, centralized logging, IDS/IPS, firewalls, and network security monitoring.
• Identify suspicious activities, security vulnerabilities, and potential compromises across enterprise systems.
• Perform security analysis using tools such as Wireshark, tcpdump, and other monitoring technologies.
• Support security compliance efforts aligned with NIST, CMS ARC-AMPE, COBIT, and FedRAMP.
• Assist with security risk mitigation, documentation, reporting, and audit-related activities.
• Collaborate with cybersecurity teams, IT administrators, vendors, and business stakeholders.
• Provide technical guidance to junior security analysts and support security operations improvements.

1. 6+ years of experience in IT System Security or System Administration.
2. Hands-on experience with information security incident response procedures and practices.
3. Understanding of enterprise IT security, system administration, network security, and secure configurations.
4. Intermediate proficiency in Microsoft Word, Excel, PowerPoint, and Visio, including templates and style guidelines.
5. Strong understanding of enterprise operations, cybersecurity risks, and security best practices.
6. Strong analytical, troubleshooting, documentation, and communication skills.
7. Ability to work independently, collaborate with cross-functional teams, and manage multiple priorities.

Preferred Skills

• Experience supporting Security Operations Center (SOC) monitoring, alert investigation, and threat detection.
• Experience with SIEM tools, centralized log management, and security event analysis.
• Knowledge of firewalls, IDS/IPS, TCP/IP, network traffic analysis, Wireshark, and tcpdump.
• Experience with vulnerability assessments, threat hunting, penetration testing, and risk management.
• Knowledge of Windows, Linux, VMware, cloud environments, and enterprise infrastructure security.
• Familiarity with NIST 800 series, CMS ARC-AMPE, COBIT, FedRAMP, and Risk Management Framework (RMF).
• Experience supporting security compliance assessments, audits, and security documentation.
• Prior Health Information Technology or healthcare cybersecurity experience.
• Previous work or consulting experience with federal, state, or local government agencies.
• Understanding of secure cloud environments, network segmentation, and defense-in-depth security principles.

Education & Certifications Required:

• High school diploma with at least 6 years of relevant work experience.
• Minimum 6 years of IT System Security or System Administration experience.

Preferred:

• Bachelor’s degree in Information Technology, Computer Science, or a related technical field, with at least 3 years of relevant experience.
• Security certifications such as CompTIA Security+, CISSP, ISC2 certifications, SANS GIAC, CCNA Security, or equivalent.