Security Analyst

We''re looking for a Senior Security Analyst to become the organization''s first dedicated cybersecurity hire. You''ll work directly with IT leadership, help shape security strategy, and serve as the primary security resource across the business.

This is a hands-on position that combines security operations, vulnerability management, incident response, compliance, and security program development. You''ll have visibility with leadership and the chance to influence how security evolves as the company continues to grow.

What You''ll Be Doing

• Own day-to-day security operations and help mature the overall cybersecurity program
• Manage and optimize security tools including EDR, vulnerability management, SIEM, and application control platforms
• Lead vulnerability identification, prioritization, remediation tracking, and reporting
• Respond to security incidents and coordinate investigations with internal teams and external partners
• Serve as the primary point of contact for the organization''s managed security provider
• Support HIPAA Security Rule compliance activities and security risk assessments
• Maintain security documentation, policies, standards, and procedures
• Partner with infrastructure and leadership teams to evaluate and communicate risk
• Provide security guidance for projects, new technologies, and system implementations
• Help mentor infrastructure team members and promote security best practices throughout the organization

• 5+ years of experience in cybersecurity, security operations, or a related security-focused role
• Experience working with EDR solutions (SentinelOne preferred)
• Experience with vulnerability management platforms (Tenable preferred)
• Experience investigating alerts and working with SIEM solutions
• Familiarity with application control or zero-trust technologies such as ThreatLocker
• Understanding of security risk assessments, vulnerability remediation, and security governance
• Ability to explain technical risk to both technical and non-technical audiences
• Strong troubleshooting, documentation, and communication skills

Healthcare and Compliance Experience

This environment operates within healthcare, so experience supporting HIPAA-regulated organizations is highly valued.

Experience with any of the following is especially helpful:

• HIPAA Security Rule
• Security Risk Assessments
• Audit preparation and documentation
• Risk management and remediation planning
• NIST Cybersecurity Framework
• CIS Controls

Nice to Have

• Penetration testing experience
• SentinelOne
• Tenable
• ThreatLocker
• Azure security and Entra ID
• KnowBe4
• PowerShell, Python, or automation experience
• CISSP, CySA+, GCIH, CEH, OSCP, or similar certifications