IT Information Security Analyst

Naphcare, Inc.•Vestavia Hills, AL

1d•Onsite

About The Position

NaphCare is seeking an experienced and highly motivated Information Security Analyst to join our growing Information Security team at our Corporate Office in Birmingham, AL. This role is responsible for leading security monitoring, incident detection, investigation, and response efforts across the organization’s technology environment. The Information Security Analyst will serve as an aspiring functional security practitioner in security operations, threat detection and response, collaborate and support senior analysts, and play a key role in strengthening our overall security posture. This position supports our mission of delivering quality healthcare services by protecting sensitive systems and data in a highly regulated healthcare environment.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
2+ years of experience in cybersecurity operations or SOC environments
Strong experience with SIEM platforms, EDR solutions, and log analysis
Hands-on experience investigating phishing, ransomware, insider threats, and network-based attacks
Knowledge of incident response frameworks (NIST CSIRTs, MITRE ATT&CK,etc)
Experience working in regulated environments, preferably healthcare
Strong analytical, documentation, and communication skills

Nice To Haves

Professional certifications or pursuit of such as CISSP, CISM, GCIA, GCIH, or similar (less experienced certs are considered)
Experience with cloud security monitoring (Azure, AWS, or hybrid environments)
Scripting experience (PowerShell, Python, or similar)
Familiarity with CrowdStrike, Palo Alto Firewalls, Cloudflare, M365 Security Suite, Datadog, etc.

Responsibilities

Perform triage, investigation, and response to security incidents across endpoints, servers, networks, and cloud environments
Monitor and analyze security alerts from SIEM, EDR, IDS/IPS, email security, and other detection platforms
Conduct threat hunting activities to identify emerging risks and indicators of compromise
Perform root cause analysis and develop remediation recommendations
Create and maintain incident response playbooks and standard operating procedures
Collaborate with IT, infrastructure, compliance, and other business unit teams during security investigations
Support vulnerability management efforts, including risk prioritization and remediation validation
Assist with regulatory and audit requirements (HIPAA, NIST 800-53, SOC 2, etc.)
Provide support to security projects of the department and other IT initiatives.
Contribute to continuous improvement of detection rules, automation, and security tooling
Participate in on-call rotation and escalation support as needed