Monitor, analyze, and triage security events across the healthcare enterprise.
Support day-to-day cyber defense operations, assist with incident detection and response.
Contribute to exposure identification and reduction efforts.
Develop foundational cybersecurity skills and serve as the first line of defense.
Perform Tier 1-level ticket queue intake, triage, investigation, remediation, and document corrective actions in corporate ticketing systems.
Monitor security alerts, events, and dashboards to identify potential threats, policy violations, or anomalous behavior.
Triage detections from endpoint or identity-related alerts, email security, phishing reports, vulnerability, and logging platforms.
Conduct basic threat hunting and gather artifacts (hashes, URLs, process trees, etc.) for senior reviewers.
Assist with investigation and documentation of security events following established playbooks and procedures.
Leverage AI‑assisted investigation, summarization, correlation, and data enrichment, verifying content for accuracy.
Stay informed on emerging threats, healthcare-specific attack trends, and adversary use of automation and AI.
Assist in maintaining security tool health.

Associates or Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
0–2 years in security operations, incident response, cybersecurity/IT roles (help desk, SOC Tier 1) or related technical roles (internships included).
ISC2 CC, GIAC GFACT, GIAC GSEC, CompTIA Security+, CompTIA CySA+, or similar certifications preferred.
Curiosity and willingness to learn new technologies, including AI-enabled security capabilities.
Foundational understanding of core security concepts (malware, phishing, lateral movement, vulnerabilities, lateral movement and identity misuse).
Basic understanding of networking, compliance frameworks, and common attack vectors.
Familiarity with SIEM/centralized logging, EDR, email security, phishing defense, and vulnerability management.
Comfortable using automation/AI tools within policy constraints; strong attention to detail and documentation.
Analytical and critical thinking skills.
Moderate computer skills to include use of email, word processing, data entry, and spreadsheets.
Strong written and verbal communication skills.
Ability to solve cybersecurity problems following documented procedures.
Ability to organize and manage multiple tasks simultaneously.
Ability to follow defined processes and escalation paths.

Cyber Threat Analyst

Key skills