Security Analyst

Pixel Health• US,

3d•$0 - $105,300•Remote

About The Position

The Security Analyst is responsible for the day-to-day operation of security monitoring, identity governance support, and compliance support. The role investigates and resolves security events, advises on access and authentication standards, and prepares and maintains documentation and evidence demonstrating compliance with regulatory and client requirements. The position serves as the first point of contact for routine security matters. This is a remote position with standard business hours. The employee must be available for after-hours escalation of critical security incidents and handle confidential and regulated information in line with HIPAA requirements.

Requirements

3 to 5 years of experience in information security, security operations, or IT support with security responsibilities.
Experience investigating security events across endpoint, email, or identity sources.
Working knowledge of identity and access management concepts, including multi-factor authentication, conditional access, and least privilege.
Familiarity with the HIPAA Security Rule and additional frameworks, such as NIST CSF, CIS Controls, or PCI DSS.
Demonstrated ability to write clear policies, procedures, and technical documentation.
Strong written and verbal communication, including client-facing summaries.
Ability to work independently, prioritize competing demands, and exercise sound judgment on escalation.
Availability for after-hours escalation of critical security incidents.
Ability to handle confidential and regulated information in line with HIPAA requirements.

Nice To Haves

Security+ or equivalent certification.
Experience in a managed services or healthcare environment.
Scripting experience for reporting and automation.
Experience completing cyber insurance or vendor security questionnaires.

Responsibilities

Monitor, triage, and investigate security events across endpoint, email, and managed detection and response sources.
Contain and remediate security events using approved procedures, and escalate incidents that exceed defined thresholds.
Perform identity containment actions, such as account lockout, session revocation, and authentication reset.
Respond to reported phishing and suspicious activity.
Coordinate vulnerability management activities, including prioritization, remediation tracking, and status reporting.
Document incidents and prepare summaries for management review.
Conduct periodic access reviews and report exceptions.
Review privileged access, application control, and credential management requests against established policy, and escalate exceptions.
Draft and revise policies, procedures, and supporting standards for management review and approval.
Maintain the policy and procedure library, including versioning and the annual review cycle.
Prepare client-ready documentation and supporting materials for management to present.
Participate in risk assessments and audits by gathering evidence, performing control checks against defined criteria, and documenting observations. Ratings and conclusions are determined by management.
Prepare responses to client security questionnaires and due diligence requests from approved content, and route new or non-standard questions for review.
Administer the security awareness program, including assignment, completion tracking, and follow-up.
Join client discussions in a supporting role as directed by management.
Manage security work through the ticketing system, maintaining accurate records, priorities, and service levels.
Develop and maintain runbooks, procedures, and knowledge base content for recurring security inquiries.
Identify recurring issues and recommend process improvements.