Security Analyst

Position Overview

We are looking for an experienced Security Analyst with 6+ years of hands-on cybersecurity experience to join our IT team. The right candidate will bring strong expertise in threat detection, incident response, vulnerability management, and compliance—while also serving as a trusted partner across engineering, IT, and leadership.

Key Responsibilities

Security Operations & Incident Response

·       Monitor, detect, and analyze security alerts and incidents using SIEM and other advanced tools.

·       Conduct forensic investigations and coordinate timely remediation of threats.

·       Develop and refine playbooks to improve incident response efficiency and consistency.

Threat & Vulnerability Management

·       Lead vulnerability assessments, penetration testing, and risk evaluations with timely mitigation of critical findings.

·       Research emerging threats and attack methodologies to proactively strengthen defenses.

·       Provide expert recommendations to leadership on evolving risks and countermeasures.

Governance, Risk & Compliance (GRC)

·       Ensure compliance with regulatory standards such as ISO 27001, NIST, SOC 2, and HIPAA.

·       Support and lead security audits, risk assessments, and compliance initiatives.

·       Develop, enforce, and continuously improve security policies and procedures.

Technology Expertise

·       Partner with IT and DevOps teams to integrate security best practices into infrastructure and applications.

·       Develop automation scripts to improve monitoring, reporting, and incident response.

·       Assess endpoint security across Windows and macOS environments, recommend hardening measures.

·       Collaborate with cross-functional teams to build a strong security culture across Sevaro.

Qualifications & Skills

Required:

·       Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience.

·       6+ years of professional experience in SOC, security operations, or equivalent roles.

·       Deep knowledge of threat intelligence, incident response, vulnerability management, and risk management.

·       Hands-on experience with SIEM platforms (Splunk, QRadar, Sentinel), IDS/IPS, EDR (Threatlocker), and vulnerability scanners.

·       Strong understanding of network security, cloud security (AWS/GCP/Azure), and IAM.

·       Familiarity with regulatory frameworks and industry best practices.

·       Excellent communication skills, able to explain security issues to both technical and non-technical audiences.

Preferred:

·       Certifications such as CISSP, CISM, OSCP, GIAC, CEH, CCSP.

·       Experience leading incident response teams or major security projects.

·       Advanced scripting and automation skills (Python, Bash, PowerShell).

·       Knowledge of zero-trust architecture and modern security frameworks.

Why Join Sevaro?

·       Mission-Driven Work: Contribute to healthcare innovation while ensuring data and system security.

·       100% Remote: Work flexibly from anywhere in the U.S.

·       Cutting-Edge Tech: Collaborate with a team leveraging AI, telehealth, and advanced platforms.

·       Impact & Growth: Help shape Sevaro’s security posture as we scale nationally