> Markdown version of [/jobs/ext/505653-security-analyst](https://www.wearedevelopers.com/jobs/ext/505653-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Analyst - **Company:** Ceresti Health - **Location:** United States (Remote available) - **Experience:** Experienced - **Contract:** Internship / Graduate position - **Skills:** Artificial Intelligence, Amazon Web Services, Bash Shell, Cyber Security, Continuous Integration, Github, Python (Programming Language), Systems Development Life Cycle, Software Tools, Zero Trust Network Access, Security Information and Event Management, Data Logging, Scripting, Information Technology, Bitbucket, Hubspot - **Published:** June 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=0b39908b4a177170 ## About the Role Do you have experience in User training (technical support)?, * BS/BA degree or higher in Computer Science, Engineering, Computer Security or a related technical field Experience * 2-4 years in security, IT, or a related technical role. Internships, security certifications (e.g., Security+), home-lab projects, and academic work all count. * Experience with SOC2, HITRUST, or HIPAA (or equivalent compliance standards) * Familiarity with SIEM and logging concepts; hands-on exposure to Huntress or a similar platform is a plus * Proven experience being a part of a team and contributing to achieve team goals * Exposure to security or IT tools such as AWS, M365 Entra / Purview, Huntress, Mosyle, Bitdefender, KnowBe4, or Snyk - familiarity with several, not all, is fine * Awareness of CI/CD pipeline concepts (e.g., Bitbucket Pipelines, GitHub Actions) - a plus, not required * Comfort with, or eagerness to learn, basic scripting (Python, Bash, or Go) to verify data and configuration settings * Experience within healthcare industry highly desired * Experience with security testing in regulated environments, ideally HIPAA / healthcare, and an instinct for protecting PHI is a plus * Experience using AI tools (e.g., Co-Pilot, Gemini, Claude) to accelerate security analysis and development of scripts for security system integration/validation * Clear written and verbal communication, including writing security ticket resolutions and root cause analysis reports, and staying calm and communicating clearly during a security incident Skills * Reliable, persistent and results-oriented * Easy to get along with; able to work with a team * Must demonstrate a high level of integrity and ownership * Consistently transparent, courageous and enthusiastic * Must be able to pass a background check ## Description Security and compliance are vital to protecting the systems that allow us to serve families living with dementia. As our Security Analyst, you are the first line of defense. You will help us configure security monitoring tools, integrate signal data, and build a security monitoring program. If you love looking into the technical details, learning intricate configurations, and watching user patterns, this role is built for you. This is an important effort because it will elevate our security operations towards a path of automation and data-driven monitoring. This role reports directly to the CISO with a focus on mentoring and partnership to further your career opportunities., * Analyze, deploy, integrate, and monitor security tools, including connecting sources such as AWS, HubSpot, Canvas, and MacBook endpoints (Mosyle, Bitdefender) into our Huntress SIEM. * Review security baselines for configurations to identify gaps, then work with IT to close those gaps (e.g., CIS Benchmark, Vendor Best Practices) * Assist in monitoring security controls in support of SOC 2 (and future HITRUST) compliance assessments. * Monitor security dashboards, alerts, cyber incidents, and participate in tabletop exercises to improve the detection and response posture. * Study user and system behavior to strengthen our security awareness training (KnowBe4) by turning real-world signal into targeted, relevant education for our team. * Work closely with the product team (engineering, product management, and quality assurance) to ensure security monitoring is in place throughout the SDLC * Create proofs of concept and develop capabilities using AI to demonstrate what is possible and accelerate the security program. * Compile and update runbooks to respond to possible security scenarios. * Track assets, users, and files to ensure the security process is followed by our security design and zero trust architecture. * Write and maintain simple scripts and utilities to automate routine security checks across the Govern, Identify, Protect, Detect, Respond, and Recover functions. * Help track and report key metrics such as average time to detect/respond/contain, false positive rate, failed login rate, patch compliance rate, and vulnerability exposure time. * Assist in other capacities around Governance, Risk, and Compliance as needed. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Integrate your Cognitive Assistant with 3rd-party DBs and software](https://www.wearedevelopers.com/videos/249-integrate-your-cognitive-assistant-with-3rd-party-dbs-and-software) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)