Job Description

Title: Cybersecurity Analyst

Location: Remote

Duration : 12+ months

Our client is seeking a skilled Cybersecurity Analyst to ensure the confidentiality, integrity, and availability of enterprise healthcare IT systems, applications, and data. This role involves monitoring, detecting, analyzing, and responding to security events, conducting vulnerability and risk assessments, implementing security controls, and supporting compliance with federal information security policies and healthcare data protection standards (FISMA, NIST 800-53, FedRAMP, HIPAA).

Key Responsibilities

• Security Monitoring & Incident Response
• Monitor SIEM tools, dashboards, and alerts for threats, anomalies, or suspicious activities.
• Perform triage, containment, eradication, and recovery as part of the incident response process.
• Conduct root cause analysis and provide documentation with recommendations for prevention.
• Vulnerability & Risk Management
• Conduct regular vulnerability scans and work with system/application owners to remediate findings.
• Participate in security risk assessments and risk management reviews.
• Compliance & Governance
• Ensure compliance with federal mandates and healthcare security frameworks (FISMA, NIST 800-53, FedRAMP, HIPAA, OMB).
• Prepare and maintain documentation for Authority to Operate (ATO), POA&Ms, and continuous monitoring reports.
• Security Tools & Process Improvement
• Support deployment, tuning, and optimization of security tools (SIEM, endpoint protection, IDS/IPS, vulnerability management, DLP).
• Recommend enhancements to security posture, processes, and automation.
• Awareness & Collaboration
• Assist in developing security awareness and training programs.
• Participate in tabletop exercises, security drills, and audits.
• Work closely with IT, applications, and network teams to embed security throughout system lifecycles.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• 3+ years of hands-on experience in cybersecurity or information security roles.
• Strong background in security monitoring, incident response, and vulnerability management.
• Familiarity with NIST 800-53, RMF, CIS Controls, HIPAA, and federal compliance requirements (FISMA, FedRAMP).
• Excellent analytical, problem-solving, and documentation skills.
• U.S. Citizenship required (federal contract requirement).

Preferred Qualifications
Industry certifications such as Security+, CEH, CySA+, CISSP (or in progress).
Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel), endpoint security, and cloud security controls (AWS, Azure).
Knowledge of scripting/automation (PowerShell, Python) for security analysis and reporting.

Job Tags

Similar Jobs