Security Analyst II - IS INFO SECURITY

Preferred Qualifications:

Position Summary

The analyst collaborates with IT, clinical, and business stakeholders to reduce risk and ensure the confidentiality, integrity, and availability of electronic protected health information (ePHI).

• Monitor security events and alerts using SIEM, EDR, and other security tools to detect potential threats impacting healthcare systems and data
• Investigate, respond to, and document security incidents involving ePHI, clinical applications, and enterprise infrastructure
• Support incident response activities including containment, recovery, root‑cause analysis, and post‑incident reporting
• Conduct vulnerability scanning and risk assessments of servers, endpoints, medical devices, and healthcare applications
• Assist with remediation efforts and validate security control effectiveness in collaboration with IT, clinical engineering, and application teams
• Support compliance with healthcare regulatory requirements including HIPAA, HITECH, and organizational security policies
• Participate in audits, risk assessments, and third‑party security reviews
• Maintain and update security documentation, incident response playbooks, and standard operating procedures
• Contribute to security awareness initiatives and provide guidance to staff on protecting patient information
• Stay informed of emerging healthcare cybersecurity threats, ransomware trends, and industry best practices

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
• 3–5 years of experience in information security, security operations, or related IT roles
• Hands‑on experience with:
• Security monitoring and incident response
• Vulnerability management tools and processes
• Endpoint, network, and identity security controls
• Working knowledge of:
• HIPAA Security Rule requirements
• Windows and Linux operating systems
• Networking fundamentals (TCP/IP, DNS, firewalls)
• Common attack techniques targeting healthcare environments
• Strong analytical, documentation, and communication skills
• Ability to work effectively in a regulated, patient‑care‑focused environment
• no more than 50-75 miles from KH ASB

• Experience in healthcare, hospital, payer, or clinical environments
• Familiarity with electronic health record (EHR) platforms and clinical systems
• Experience securing cloud‑based healthcare workloads (Azure, AWS, or GCP)
• Scripting or automation experience (PowerShell, Python, or similar)
• Certifications such as:
• CompTIA Security+ or CySA+
• HCISPP, SSCP, GCIH, or similar

Overview:

With that context, safety is our top priority. We provide an integrated system of healthcare experts committed to providing exceptional care.