IT Security Analyst

MEDICAL PRIORITY CONSULTANTS INC•Salt Lake City, UT

2d•Hybrid

About The Position

Step into a role where what you do truly matters. As an IT Security Analyst, you'll be on the front lines of protecting critical systems, tackling real time threats, and working with teams across the organization to stay ahead of evolving cyber risks. This role is eligible for for our full offering of benefits such as health, dental, vision, pet, and legal insurance, PTO, company contributions to a 401K and HSA, gym reimbursement, and more while working at an award winning workplace culture. Come see why our teams love working here! This is a hybrid role based in Salt Lake City, UT. Summary: This position is responsible for supporting and maintaining the organization’s IT security operations, with a strong focus on networking, endpoint protection, and monitoring activities. The ideal candidate will assist in enforcing established security policies and controls while helping identify, analyze, and communicate risks and security issues. This role has primary responsibility for monitoring and maintaining security technologies including IPS, EDR, and SIEM platforms, as well as supporting network security operations and incident response activities. The analyst will also assist with cloud security initiatives and work closely with infrastructure and engineering teams to ensure security controls are properly implemented and functioning as expected. This position requires the ability to learn quickly and operate independently with minimal supervision in a fast-paced environment. This role operates on a hybrid work model, and reports to the Executive Director of Information Security and Infrastructure plays a critical role in strengthening the organization’s overall security posture.

Requirements

4+ years experience in a technology field
Bachelors degree in computer science, technology field, or demonstrated equivalent of experience
Experience with regulatory compliance such as CMMC, ISO 27001, GDPR, PCI DSS
Strong understanding of current security principles including the 10 security domains
Experience with network and firewall security, software auditing systems, and IPS
Experience with performing vulnerability assessments, SSL, and web security
Strong understanding of data protection and privacy regulations
Strong professional, interpersonal, communication, multi-tasking skills, and the ability to work well within a team environment

Nice To Haves

Current CISSP, CISM, CEH, or GIAC certification preferred

Responsibilities

Monitor and maintain security technologies including SIEM, EDR, IPS, firewalls, and network security tools, ensuring they are properly configured, operational, and effectively detecting potential security issues, alerts, and anomalous activity
Support incident response activities including triage, investigation, containment, and remediation of security incidents
Document security events and incidents and perform investigations and root cause analysis
Perform vulnerability scanning, track remediation efforts, and support risk mitigation activities
Assist with breach response activities and support incident coordination efforts
Assist in maintaining and supporting existing security policies, procedures, and controls in alignment with ISO 27001 and other regulatory requirements
Support audit activities, including evidence collection and coordination with internal teams and auditors
Maintain security documentation, system configurations, and operational procedures related to security tooling and monitoring
Assist Legal, Procurement, and other departments with security questionnaires, vendor reviews, and due diligence requests
Respond to security-related tickets, alerts, and operational requests in a timely manner
Collaborate with IT, Engineering, and Cloud teams to ensure security controls are implemented and functioning effectively across infrastructure and cloud environments
Support cloud security efforts across Azure and other platforms, including monitoring and configuration reviews
Other duties as assigned within Information Technology and Information Security functions