Jr. Cyber Security Analyst

New York Cancer and Blood Specialists•Port Jefferson Station, NY

4d•Onsite

About The Position

New York Cancer & Blood Specialists (NYCBS) is seeking a talented Jr. Cyber Security Analyst to help monitor, investigate, and protect the systems, networks, medical devices, and patient data that keep the organization running. This role involves reviewing security alerts, assisting with vulnerability scanning, and supporting incident response, providing hands-on experience within a clinical and administrative environment. The position is ideal for someone early in their security career who is curious, detail-oriented, and eager to learn in a highly regulated environment where security failures can significantly impact patient care and safety.

Requirements

1+ years of experience in IT, help desk, systems administration or a security-related role, or a degree, bootcamp or equivalent coursework in cybersecurity or information technology
Foundational understanding of networking concepts, operating systems, and common security controls
Familiarity with core security concepts such as authentication, encryption, malware, and phishing
Strong attention to detail and good documentation habits
Clear communication skills, able to explain technical issues to non-technical clinical and administrative staff
Willingness to learn, ask questions and take direction from senior team members
Ability to handle sensitive information with discretion

Nice To Haves

Hands-on exposure to security tools such as SOC platforms, vulnerability scanners, or EDR solutions
Entry-level certifications such as CompTIA Security+, Network+ or similar
Familiarity with HIPAA or other healthcare data privacy and security regulations
Basic scripting or automation experience (PowerShell, Python, etc.)
Experience working in a hospital, health systems, or clinical environment

Responsibilities

Monitor security tools and dashboards (SOC, EDR, email security, etc.) and triage alerts.
Escalate and document suspicious activity, working with senior engineers to determine if an alert is a false positive or a real incident.
Assist with vulnerability scanning, track remediation progress, and follow up with system owners.
Support incident response efforts through evidence gathering, timeline building, and after-action documentation.
Perform routine access reviews and help maintain least-privilege practices across applications.
Review phishing reports submitted by staff.
Assist with HIPAA and other healthcare compliance activities, including gathering evidence for audits and risk assessments.
Maintain security documentation and policies.
Support security awareness training for clinical, administrative, and IT staff.
Stay current on emerging threats and healthcare-specific attack trends (e.g., ransomware targeting hospital systems, PHI breaches, medical device vulnerabilities).