Responsibilities include:
Security Operations and Monitoring
Monitor and analyze security events and alerts across networks, endpoints, cloud platforms,
Investigate suspicious activity and lead incident response efforts, including triage, containment,
eradication, and recovery.
Serve as an escalation point for complex security incidents and coordinate cross-functional
Maintain and tune SIEM, EDR, and other security tools to improve detection and reduce false
Conduct root cause analysis and document incidents, actions taken, and lessons learned.
Healthcare Security and Compliance
Ensure compliance with HIPAA, HITECH, and other healthcare regulatory and privacy
Participate in security risk assessments, gap analyses, and audits (internal and external),
including support for third-party assessments.
Develop and maintain security policies, standards, and procedures aligned with regulatory
Monitor controls related to PHI protection, data access, and breach prevention.
Support audit readiness and remediation activities for compliance findings.
Vulnerability and Risk Management
Conduct regular vulnerability scans and coordinate remediation efforts across infrastructure and application teams.
Prioritize risks based on business impact, exploitability, and regulatory exposure.
Track and report on vulnerability remediation status and risk reduction efforts.
Perform risk assessments on new systems, vendors, and technology implementations.
Contribute to third-party risk management and vendor security reviews.
Security Engineering and Architecture Support
Collaborate with infrastructure and application teams to implement secure configurations and controls.
Evaluate and recommend security solutions, tools, and technologies to enhance protection capabilities.
Support secure design reviews for new applications, systems, and integrations.
Validate implementation of security controls across networks, endpoints, and cloud environments.
Identity and Access Management (IAM)
Review and monitor user access to systems containing PHI and sensitive data.
Support access governance processes, including provisioning, deprovisioning, and periodic access reviews.
Investigate access anomalies and enforce least-privilege principles.
Training, Awareness, and Continuous Improvement
Support security awareness and training initiatives with a focus on healthcare threats (e.g., phishing, ransomware).
Provide guidance to IT and business teams on security best practices and risk mitigation.
Identify opportunities to improve security processes, tooling, and response capabilities.
Mentor junior analysts and contribute to the development of the security team.
HIPAA Security Rule and Privacy Rule
NIST Cybersecurity Framework (CSF) and/or NIST 800-53
HITRUST CSF (preferred in healthcare environments)
Knowledge of identity and access management practices.
Understanding of secure system and application design principles.
Strong analytical and problem-solving skills with the ability to assess complex security threats.
Ability to lead incident response efforts under pressure and with urgency.
Excellent written and verbal communication skills, including documentation and reporting.
Strong attention to detail and ability to manage multiple priorities.
Ability to work cross-functionally with IT, compliance, legal, and business stakeholders.
High level of integrity and commitment to protecting sensitive data.
Effective detection and response to security incidents
Reduction in vulnerabilities and security risk exposure
Successful audit outcomes and regulatory compliance adherence
Protection of PHI with minimal security-related disruptions
Improved security posture through proactive controls and monitoring
Strong collaboration and stakeholder confidence in security operations