Cybersecurity Analyst

Are you passionate about cybersecurity and ready to make an impact in an organization dedicated to improving community health? We're seeking a Cybersecurity Analyst to join our growing team and help protect the systems, networks, and sensitive information that support patient care and healthcare operations.

As a Cybersecurity Analyst, you'll serve on the front lines of security operations, acting as the first responder for security alerts, incidents, and user-reported concerns. You'll collaborate with IT teams, partner health centers, Cybersecurity Engineers, and the Cybersecurity Architect to investigate threats, strengthen security controls, and ensure a secure environment across our organization.

This is an excellent opportunity for a cybersecurity professional who enjoys incident response, risk management, threat analysis, and continuous learning in a mission-driven healthcare environment.

What You'll Do

Security Monitoring & Incident Response

- Serve as the first responder for user-reported security concerns, security alerts, incidents, and potential breaches across Azure, Microsoft 365, EHR platforms, and related systems.

- Perform initial triage, investigation, containment, and response activities before escalating complex issues to Cybersecurity Engineers or the Cybersecurity Architect.

- Monitor security tools and systems to identify suspicious activity, vulnerabilities, and emerging threats.

- Participate in an assigned on-call rotation to support critical incidents and provide timely response when needed.

Risk Management & Vulnerability Assessment

- Conduct security assessments, vulnerability scans, and risk evaluations.

- Document findings and track remediation efforts through resolution.

- Support compliance and security initiatives aligned with NIST, HIPAA, CIS Critical Security Controls v8, and other industry best practices.

- Assist in identifying, assessing, and mitigating organizational security risks.

Security Operations & Collaboration

- Administer, monitor, and validate access controls, authentication mechanisms, and secure configurations across cloud and network environments.

- Collaborate with internal IT teams and partner health centers to strengthen security operations and improve overall security posture.

- Partner with Cybersecurity Engineers and the Cybersecurity Architect on investigations, remediation efforts, and research initiatives.

- Maintain clear and consistent communication through the established chain of command and provide status updates during active incidents.

Continuous Improvement

- Stay current on emerging threats, cybersecurity trends, and industry best practices.

- Support the development and enhancement of security policies, procedures, and operational standards.

- Contribute to ongoing cybersecurity and compliance initiatives as organizational needs evolve.

- Perform additional duties and responsibilities as assigned.

What You'll Bring

Required Qualifications

- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.

- 2 to 5 years of experience in cybersecurity, information security, IT operations, or a related technical role.

- Hands-on experience with security operations, incident response, vulnerability management, or risk management.

- Strong understanding of cybersecurity technologies, including:
- Security Information and Event Management (SIEM)

- Endpoint Detection and Response (EDR)

- Firewalls

- Vulnerability management tools

- Incident response processes

- Experience working with security frameworks and standards such as NIST, CIS Controls, ISO 27001, and HIPAA.

- Strong analytical and problem-solving skills with the ability to investigate and resolve security issues.

- Excellent documentation skills with attention to detail in tracking findings, evidence, and remediation activities.

- Ability to communicate technical information effectively to