Jr. Cyber Security Analyst

OneOncology•Port Jefferson Station, NY

20h•Onsite

About The Position

NY Cancer & Blood is seeking a talented Jr. Cyber Security Analyst to help monitor, investigate, and protect the systems, networks, medical devices and patient data that keep our organization running. Working alongside senior security staff, you'll review security alerts, assist with vulnerability scanning and support incident response, gaining hands-on experience across our clinical and administrative environment. This role is well-suited to someone early in their security career who is curious, detail-oriented, and eager to learn in a highly regulated environment where security failures can have real consequences for patient care and safety.

Requirements

1+ years of experience in IT, help desk, systems administration or a security-related role, or a degree, bootcamp or equivalent coursework in cybersecurity or information technology
Foundational understanding of networking concepts, operating systems, and common security controls
Familiarity with core security concepts such as authentication, encryption, malware, and phishing
Strong attention to detail and good documentation habits
Clear communication skills, able to explain technical issues to non-technical clinical and administrative staff
Willingness to learn, ask questions and take direction from senior team members
Ability to handle sensitive information with discretion

Nice To Haves

Hands-on exposure to security tools such as SOC platforms, vulnerability scanners, or EDR solutions
Entry-level certifications such as CompTIA Security+, Network+ or similar
Familiarity with HIPAA or other healthcare data privacy and security regulations
Basic scripting or automation experience (PowerShell, Python, etc.)
Experience working in a hospital, health systems, or clinical environment

Responsibilities

Monitor security tools and dashboards (SOC, EDR, email security, etc.) and triage alerts as they come in
Escalate and document suspicious activity, working with senior engineers to determine whether an alert is a false positive or a real incident
Assist with vulnerability scanning, help track remediation progress and follow up with system owners
Support incident response efforts through evidence gathering, timeline building, and after-action documentation
Perform routine access reviews and help maintain least-privilege practices across applications
Help review phishing reports submitted by staff
Assist with HIPAA and other healthcare compliance activities, including gathering evidence for audits and risk assessments
Maintain security documentation and policies
Support security awareness training for clinical, administrative, and IT staff
Stay current on emerging threats and healthcare-specific attack trends (e.g., ransomware targeting hospital systems, PHI breaches, medical device vulnerabilities)