Security Analyst

Job not on LinkedIn

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $110k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

The Health Management Academy

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1998

💼 Consulting

📣 Marketing

🏥 Healthcare

Consulting • Marketing • Healthcare

The Health Management Academy is a premier membership-based community founded in 1998 that serves healthcare's most influential CXOs from top U. S. health systems and decision-makers from innovative industry companies. The organization focuses on cultivating exceptional peer groups, offering original market insights, world-class leadership development programs, and novel member alliances. Its industry-leading solutions help member companies facilitate meaningful relationships, navigate strategic transformations, and address critical industry issues with disruptive solutions. The Academy is committed to fostering connections through executive peer learning, supporting professional growth, and delivering actionable data and insights on key healthcare challenges.

📋 Description

• Own significant portions of the day-to-day security operations program, including security monitoring, incident response, access governance, vulnerability management, vendor risk, audit evidence, and cloud and SaaS security • Establish a continuous compliance evidence process supporting SOC 2 Type II and HITRUST i1 assessments • Analyze misdirection incidents and improve DLP and external-send controls • Build access governance through provisioning and deprovisioning verification, recurring access reviews, privileged-access reviews, and MSP handoff validation • Investigate detections and suspicious activity across CrowdStrike Falcon, Okta, Microsoft 365, Entra ID, Microsoft Purview, Zscaler, Box, KnowBe4, and related systems • Prioritize vulnerabilities, security findings, access issues, and control gaps and drive remediation with internal teams, the MSP, and vendors • Maintain provisioning verification, access reviews, vendor security reviews, DLP monitoring, security ticket workflows, and recurring control activities • Improve detection coverage and logging across CrowdStrike NG SIEM and other platforms • Support cloud security work in Azure and AKS • Maintain audit-ready evidence for SOC 2 and HITRUST • Contribute to vendor assessments, security terms, and AI policy monitoring • Report to the Sr. Director of InfoSec and IT

🎯 Requirements

• Strong investigative reasoning; ability to work from incomplete information, form and test hypotheses, determine priorities, and make sound escalation decisions • Practical risk prioritization based on exploitability, business impact, exposure, and operational reality • Clear written communication for incident documentation, audit evidence, and nontechnical leaders • Strong ownership and judgment; ability to drive work across teams and vendors, work independently, and recognize matters requiring security leadership or Legal • Ability to live in and physically perform all work in the United States • Nice to have: automation experience with Python or PowerShell • Nice to have: detection engineering experience, including writing and tuning queries • Nice to have: systems administrator or IT generalist experience • Nice to have: practical knowledge of identity, endpoints, SaaS integrations, securing AI platforms, and remediation • Nice to have: audit or GRC programs, SOC 2 evidence review, vendor security assessments, CAIQ responses, DPA or BAA security terms, or third-party assurance reports

🏖️ Benefits

• Health, dental, and vision benefits • Annual cash incentive program • 401k with match • Flexible PTO • PHM for PHM services for you and your dependents • Virtual interview conversations by Zoom or phone