
Healthcare Insurance • Artificial Intelligence • Education
RethinkFirst is a company dedicated to transforming behavioral health through clinical expertise, data science, and technology. By leveraging these strengths, RethinkFirst aims to empower its customers and drive improved outcomes, thereby positively impacting the lives of millions worldwide. The company provides solutions for various sectors, including schools and businesses, by supporting students and employees alike with mental health resources and tools. With substantial contributions in education, such as working with eight of the largest school districts and supporting over 3 million students, and in corporate wellness, such as reducing absenteeism for companies like Volvo, RethinkFirst utilizes AI and big data to predict patient progress and enhance clinical outcomes. Its services extend across 225 countries, significantly influencing 11 million lives globally.
October 30
🏈 Alabama – Remote
🌵 Arizona – Remote
+25 more states
⏰ Full Time
🟢 Junior
🛡️ Security Operations
🚫👨🎓 No degree required

Healthcare Insurance • Artificial Intelligence • Education
RethinkFirst is a company dedicated to transforming behavioral health through clinical expertise, data science, and technology. By leveraging these strengths, RethinkFirst aims to empower its customers and drive improved outcomes, thereby positively impacting the lives of millions worldwide. The company provides solutions for various sectors, including schools and businesses, by supporting students and employees alike with mental health resources and tools. With substantial contributions in education, such as working with eight of the largest school districts and supporting over 3 million students, and in corporate wellness, such as reducing absenteeism for companies like Volvo, RethinkFirst utilizes AI and big data to predict patient progress and enhance clinical outcomes. Its services extend across 225 countries, significantly influencing 11 million lives globally.
• The Security Operations Engineer supports the ongoing protection of company assets by assisting in monitoring, incident response, and automation tasks. • Review alerts escalated from the third-party SOC and conduct initial triage and documentation. • Execute defined response actions under guidance from senior team members. • Maintain and update security playbooks, runbooks, and knowledge base articles. • Assist with endpoint, identity, and cloud security monitoring. • Run recurring vulnerability scans (Tenable, Defender, etc.) and verify remediation status. • Document remediation progress and communicate updates to system owners. • Track SLA compliance and generate periodic metrics for leadership reporting. • Support automation development by testing and maintaining security scripts or workflows. • Assist with tool integrations and API connections between systems (EDR, SIEM, Jira, MDM, etc.). • Help gather and validate data used in automation pipelines and dashboards. • Participate in incident investigations by collecting evidence, correlating logs, and maintaining timelines. • Assist in containment, root cause analysis, and post-incident documentation. • Support after-action reviews and lessons-learned sessions. • Work closely with offshore SecOps engineers to standardize procedures and share knowledge. • Collaborate with compliance staff to provide data for audit evidence or control validation. • Participate in security training and development to strengthen technical and analytical skills.
• 1–3 years of experience in IT, security operations, or system administration. • Foundational knowledge of cloud environments (Azure, AWS). • Familiarity with SIEM tools (Sentinel, DataDog) and EDR platforms. • Basic scripting or automation experience (Python, PowerShell preferred). • Understanding of common attack vectors and security frameworks (MITRE ATT&CK, NIST CSF). • Strong documentation and organizational skills. • Experience collaborating with or within a Managed Security Service Provider (MSSP) (preferred). • Exposure to vulnerability management tools (preferred). • Certifications such as CompTIA Security+, Microsoft SC-200, or GSEC (preferred). • Interest in pursuing advanced certifications (e.g., GCIH, AZ-500, or CISSP) (preferred).
• Generous health, dental, & vision benefits package • Flexible paid time off • 11 paid company holidays • 401k + matching • Parental leave • Access to our award-winning RethinkCare platform supporting neurodiversity in the workplace through parental success, professional resilience, and personal wellbeing.
Apply NowOctober 23
Associate Security Analyst monitoring security alerts and assisting in threat analysis for clients. Working in a remote team environment to enhance cybersecurity measures across diverse computing systems.