IT Senior Information Security Analyst

Naphcare, Inc.•Vestavia Hills, AL

1d•Onsite

About The Position

NaphCare is seeking an experienced and highly motivated Senior Information Security Analyst to join our growing Information Security team at our Corporate Office in Birmingham, AL. This role is responsible for leading security monitoring, incident detection, investigation, and response efforts across the organization’s technology environment. The Senior Information Security Analyst will serve as a subject matter expert in threat detection and response, mentor junior analysts, and play a key role in strengthening our overall security posture. This position supports our mission of delivering quality healthcare services by protecting sensitive systems and data in a highly regulated healthcare environment.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
5+ years of experience in cybersecurity operations or SOC environments
Strong experience with SIEM platforms, EDR solutions, and log analysis
Hands-on experience investigating phishing, ransomware, insider threats, and network-based attacks
Knowledge of incident response frameworks (NIST CSIRTs, MITRE ATT&CK,etc)
Experience working in regulated environments, preferably healthcare
Strong analytical, documentation, and communication skills

Nice To Haves

Professional certifications such as CISSP, CISM, GCIA, GCIH, or similar
Experience with cloud security monitoring (Azure, AWS, or hybrid environments)
Scripting experience (PowerShell, Python, or similar)
Familiarity with CrowdStrike, Palo Alto Firewalls, Cloudflare, M365 Security Suite, Datadog, etc.

Responsibilities

Lead triage, investigation, and response to security incidents across endpoints, servers, networks, and cloud environments
Monitor and analyze security alerts from SIEM, EDR, IDS/IPS, email security, and other detection platforms
Conduct advanced threat hunting activities to identify emerging risks and indicators of compromise
Perform root cause analysis and develop remediation recommendations
Create and maintain incident response playbooks and standard operating procedures
Collaborate with IT, infrastructure, compliance, and leadership teams during security investigations
Support vulnerability management efforts, including risk prioritization and remediation validation
Assist with regulatory and audit requirements (HIPAA, NIST 800-53, SOC 2, etc.)
Provide mentorship and technical guidance to SOC analysts
Contribute to continuous improvement of detection rules, automation, and security tooling
Participate in on-call rotation and escalation support as needed