Senior Security Analyst

🕒 vor 2 Monaten

🇺🇸 Vereinigte Staaten – Remote

💵 $110.000 - $120.000 / Jahr

⏰ Vollzeit

🟠 Senior

🔐 IT-Sicherheitsanalyst

👻 Geisterscore 53%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

LUX Infusion

WebsiteLinkedInAlle Stellen

2 - 10 Mitarbeiter

Gegründet 2022

🏥 Gesundheitswesen

💊 Pharmazie

Healthcare • Pharmaceuticals

LUX Infusion ist ein in den USA ansässiges Unternehmen für klinische Dienstleistungen, das Infusionstherapie und spezialisierte Apothekenlösungen anbietet. Es betreibt komfortorientierte Infusionsstandorte und ein landesweites Infusionspflegeprogramm zu Hause, das Therapien für Erkrankungen wie Immundefizite (Immunglobulin), Autoimmun-/Entzündungskrankheiten (Biologika und Biosimilars), Transplantat-Immunosuppression und Blutungsstörungen bereitstellt. Das Unternehmen verwaltet die Versicherungsnavigation und Genehmigungsverfahren, bietet 340B- und HUB-Dienstleistungen für Hersteller und Kostenträger an, akzeptiert kommerzielle, Medicare- und Medicaid-Pläne und verfügt über URAC-akkreditierte Standorte in mehreren Bundesstaaten.

Beschreibung

• Protect the organization's information systems, data, technology assets, and Protected Health Information (PHI) • Design, implement, monitor, and improve the organization's cybersecurity posture in alignment with HIPAA, HITECH, and applicable standards • Monitor and analyze security events and alerts across networks, endpoints, cloud platforms, and applications • Investigate suspicious activity and lead incident response, including triage, containment, eradication, and recovery • Serve as an escalation point for complex security incidents and coordinate cross-functional response efforts • Maintain and tune SIEM, EDR, and other security tools • Conduct root cause analysis and document incidents, actions, and lessons learned • Ensure compliance with HIPAA, HITECH, and healthcare regulatory and privacy requirements • Participate in security risk assessments, gap analyses, internal and external audits, and third-party assessments • Develop and maintain security policies, standards, and procedures • Monitor controls related to PHI protection, data access, and breach prevention • Support audit readiness and remediation of compliance findings • Conduct vulnerability scans and coordinate remediation across infrastructure and application teams • Prioritize risks based on business impact, exploitability, and regulatory exposure • Track and report vulnerability remediation and risk reduction efforts • Perform risk assessments on new systems, vendors, and technology implementations • Contribute to third-party risk management and vendor security reviews • Collaborate with infrastructure and application teams to implement secure configurations and controls • Evaluate and recommend security solutions, tools, and technologies • Support secure design reviews for applications, systems, and integrations • Validate security controls across networks, endpoints, and cloud environments • Review and monitor user access to systems containing PHI and sensitive data • Support provisioning, deprovisioning, access governance, and periodic access reviews • Investigate access anomalies and enforce least-privilege principles • Support security awareness and training initiatives focused on healthcare threats • Provide security best-practice and risk-mitigation guidance to IT and business teams • Improve security processes, tooling, and response capabilities • Mentor junior analysts and contribute to security team development • Deliver effective incident detection and response, reduced vulnerabilities, successful audits, PHI protection, improved security posture, and stakeholder confidence

🎯 Anforderungen

• Bachelor's degree in Cybersecurity, Information Technology, or a related field preferred; equivalent experience considered • 5+ years of experience in cybersecurity, information security, or related roles • 2+ years of experience in healthcare IT, security, or regulated environments required • Experience with incident response, threat detection, and vulnerability management • Experience supporting audits and compliance frameworks in regulated industries • Strong understanding of security operations, including SIEM, EDR, and log analysis • Strong understanding of network security, including firewalls, IDS/IPS, and segmentation • Strong understanding of endpoint security and device hardening • Strong understanding of cloud security principles, including Azure, AWS, or similar • Strong understanding of vulnerability scanning and remediation tools • Familiarity with HIPAA Security Rule and Privacy Rule • Familiarity with NIST Cybersecurity Framework and/or NIST 800-53 • Knowledge of identity and access management practices • Understanding of secure system and application design principles • CISSP, CISM, or CISA strongly preferred • CEH, Security+, or GIAC certifications nice to have • Experience with healthcare systems such as EHR/EMR platforms, including Epic or Cerner, preferred • Experience in ransomware preparedness and response within healthcare environments preferred • Familiarity with Microsoft security stack, including Defender, Sentinel, and Entra ID, or comparable platforms preferred • Experience supporting HITRUST certification or attestation preferred • Ability to prioritize competing demands and manage multiple tasks • Ability to participate in required annual legal and ethical compliance training • Compliance with LUX Infusion's legal, ethical, and compliance policies and Compliance Manual

🏖️ Vorteile

• Purpose-driven work with real impact • Patient-first, clinician-led culture • Supportive, collaborative teammates • Opportunity to grow with a meaningful company • Reasonable accommodations during the application or interview process