Information Security Analyst

🔥 1 minute ago

🏈 Ohio – Remote

🏈 Ohio – Remote

💵 $73k - $86k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔐 Security Analyst

🚫👨‍🎓 No degree required

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Gifthealth

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2020

🏥 Healthcare

📦 Logistics

💼 Consulting

💰 $40M Private Equity Round - GiftHealth on 2023-04

Healthcare • Logistics • Consulting

Gifthealth is a technology-enabled patient access and prescription fulfillment company that connects patients, prescribers, pharmacies, and pharmaceutical manufacturers through a unified digital platform. It streamlines enrollment, electronic benefits verification, e-prior authorization, and payment/affordability support while managing pharmacy fulfillment and patient support services. The platform also provides manufacturers with actionable data and insights on patient journeys and brand performance, driving faster, more reliable medication access.

📋 Description

• Monitor and investigate security alerts from endpoint, identity, email, cloud, and other security technologies • Perform initial triage and investigation of suspected security incidents • Escalate security events according to severity and incident response procedures • Support containment, remediation, recovery, and post-incident activities • Maintain records of security investigations, findings, and response actions • Develop and maintain security incident response procedures and playbooks • Participate in security and tabletop exercises • Review vulnerability scans and prioritize findings based on severity, exploitability, asset criticality, and business risk • Coordinate vulnerability remediation with IT, Engineering, Infrastructure, and system owners • Track vulnerabilities through remediation, mitigation, or approved risk acceptance • Validate remediation and identify recurring vulnerability trends • Administer and monitor endpoint detection and response, email security, identity security, and related platforms • Investigate suspicious endpoint, authentication, phishing, and email activity • Maintain and improve security monitoring and detection capabilities • Review logs and security telemetry during investigations • Develop or tune detection rules and alerts and identify gaps in security visibility • Work with managed security providers and security vendors when applicable • Track security activities through ticketing and workflow systems • Perform security reviews of new software, tools, and vendor requests, documenting findings in the vendor risk register • Maintain operational security metrics and dashboards • Document recurring security processes and procedures • Support security audits, assessments, and compliance activities with technical evidence • Identify opportunities to automate repetitive security tasks

🎯 Requirements

• BA in Computer Science, Cybersecurity, or related field preferred; demonstrated hands-on experience also evaluated • 2 to 4 years of hands-on experience operating and tuning security tools in a live production environment • Understanding of endpoint security, identity and access management, vulnerability management, phishing and email security, network security, incident response, and security logging and monitoring • Experience investigating technical security issues across Windows, macOS, Linux, cloud platforms, or enterprise SaaS environments • Ability to interpret logs, alerts, vulnerability findings, and other technical security information • Strong documentation and communication skills • Preferred experience with EDR/MDR, vulnerability management, and email security platforms such as SentinelOne, Tenable, or Proofpoint • Preferred experience with identity and SSO platforms such as Okta and AWS or other public cloud platforms • Preferred experience with security frameworks or regulatory requirements such as NIST, CIS Controls, SOC 2, PCI DSS, or HIPAA • Preferred familiarity with scripting or automation using Python, PowerShell, APIs, or similar technologies • Preferred familiarity with GRC or IT service management platforms such as Vanta and Freshservice • Security+, CySA+, GSEC, SSCP, or equivalent experience preferred • Must be able to work at a computer for extended periods • Must be able to communicate effectively verbally and in writing • Must be able to handle and access sensitive security and system data in compliance with organizational data handling requirements • Must be able to respond to security incidents outside standard working hours when required

🏖️ Benefits

• Full-time employment • Standard business hours • Opportunity to work with Security, IT, Engineering, and other business teams • Equal employment opportunity and inclusive work environment