> Markdown version of [/jobs/ext/4621120-security-analyst](https://www.wearedevelopers.com/jobs/ext/4621120-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst

- **Company:** Innovative Hematology, Inc.
- **Location:** Indianapolis, IN, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Access Control List, Active Directory, Amazon Web Services, Health Informatics, Cyber Security, Information Systems, Databases, System Configuration, Learning Management Systems, Data Security, DevOps, Multi-Factor Authentication, Email Filtering, Identity and Access Management, Information Technology Operations, Internet Security, Windows Servers, Network Architecture, PCI Data Security Standards, Cloud Services, Anti-Phishing, Smart Devices, HybridCloud, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, CIS Benchmarks, Network Server, Api Management, Vulnerability Analysis
- **Published:** November 7, 2026
- **Apply:** https://www.careerbuilder.com/job-details/security-analyst-indianapolis-in--6f675e1e-a666-490b-afc2-40b7bead2cb2

## About the Role

Security Analysis, Blood Disorders, Hematology, Coagulation, Patient Care, Internet Security, Information Technology & Information Systems, Security Analysis, Maintain Compliance, Hybrid Cloud, * Minimum Associate's degree in related field, Bachelor's degree preferred.

 * Minimum 3 to 5 years of progressive experience in Cybersecurity operations, or a related field. Healthcare IT experience strongly preferred.
 * Alternative to minimum: 6 to 8 years of progressive experience in Cybersecurity operations.
 * Valid driver's license and insured automobile required.
 * All IHI employees are expected to enable multi-factor authentication via their personal smart phone/smart device in order to access IHI systems as a requirement of the role.

This position is open to residents of the State of Indiana, and requires routine presence at our Center in Indianapolis, IN. Frequency of on-site presence is dependent upon role and department needs.

## Description

* Program Administration: Own and administer the day-to-day enterprise VMP across internal endpoints, servers, databases, and hybrid cloud infrastructure.
 * Scanning & Analysis: Coordinate and oversee routine vulnerability scanning schedules, analyzing scan data and validating findings against threat intelligence and operational risk.
 * Remediation Governance: Partner with IT Operations and Cloud & DevOps Engineering to track, prioritize, and validate remediation workflows for critical and high vulnerabilities within established SLAs.
 * Exception Tracking: Document and track risk exceptions or remediation roadblocks in accordance with corporate policy.

 2. Security Alert Monitoring, Incident Triage & MSSP Collaboration
 * MSSP Point of Contact: Serve as the primary technical POC for the external MSSP, managing daily operational handoffs, alert escalations, and SLA performance.
 * Multi-Tool Alert Triage: Monitor, analyze, and triage security alerts across endpoint detection and response (EDR), cloud workloads, identity providers, and email filtering systems.
 * Phishing & Incident Response: Review, investigate, and remediate reported employee phishing submissions and suspected compromised credential alerts, escalating confirmed incidents in accordance with the Incident Response Plan.

 3. Compliance Oversight & Audit Readiness
 * Regulatory Framework Alignment: Evaluate technical, physical, and administrative safeguards against the HIPAA Security Rule (45 CFR Part 164), URAC accreditation standards (Core OPIN & RM modules), NIST CSF 2.0, and PCI DSS v4.0.
 * Audit Evidence Coordination: Coordinate and gather technical compliance artifacts, audit evidence, and system configuration logs across IT verticals for external audits, annual HIPAA Risk assessments, and accreditation renewals.
 * Access & Privilege Audits: Conduct routine internal audits of access control lists, privileged user activities, and third-party vendor access to ensure adherence to least privilege and minimum necessary principles.

 4. Security Awareness Training & Human Risk Management
 * Awareness Program Administration: Build, schedule, and administer monthly workforce security awareness training curricula and unannounced simulated phishing campaigns utilizing the enterprise LMS platform.
 * Metrics & Consequence Enforcement: Track workforce completion rates, phish-prone percentages, and compliance metrics; collaborate with HR and Compliance to remediate chronic training delinquencies and phish failures in alignment with corporate policy.

 5. Cross-Functional IT Vertical Collaboration
 * IT Operations: Partner with team on endpoint hardening, Windows Server security baselines, and active directory hygiene.
 * Cloud & DevOps: Collaborate with team on AWS security groups, IAM least privilege, container/pipeline security, and AWS network infrastructure.
 * Application & Data: Interface with teams to review third-party software risks, database access governance, API integrations, and secure data handling baselines.