Information Security Analyst

Position Summary

The Information Security Analyst independently performs established cybersecurity activities to protect MHM systems, data, and users. This role owns routine security alerts and service requests, administers assigned security tools, investigates common security incidents, and coordinates vulnerability remediation within defined policies and procedures. Complex, unusual, or higher-risk matters are escalated to the Senior Analyst, Security Engineer, or Information Security leadership.

Salary

The starting salary rate begins at $93,734. Mid range at $119,511. Actual starting rate will be commensurate with experience and education.

Scope and Impact

This position contributes to enterprise-wide security by maintaining assigned security controls, resolving routine security issues, and tracking corrective actions through completion. The role protects the confidentiality, integrity, and availability of organizational information and maintains operational records and compliance evidence. This position has no budgetary or supervisory responsibilities.

Decision-Making Authority

Operates with general supervision and independently prioritizes and completes routine security activities within established procedures and approved configurations. Determines the severity of common security events, performs authorized response actions, resolves routine tool and service issues, and verifies corrective actions. Escalates complex, unusual, unresolved, or higher-risk matters and changes outside established authority to the Senior Analyst, Security Engineer, or Information Security leadership.

Interactions / Working Relationships

Internal

• Collaborates regularly with Information Security leadership, Security Engineers, IT Infrastructure, Service Desk, Systems Administrators, Network Administrators, Application teams, and business stakeholders to support enterprise security operations.

• Works periodically with technology vendors, managed service providers, software support representatives, and third-party security partners regarding security tools, incident resolution, and product support.

• Administer assigned security technologies, including endpoint protection, email and web security, vulnerability management, logging, and SIEM platforms; perform routine configuration, health checks, troubleshooting, and maintenance within approved procedures. (20%)
• Monitor, analyze, investigate, and resolve routine security alerts and user-reported concerns; determine severity, document findings, perform authorized response actions, and escalate complex, unusual, or higher-risk matters. (20%)
• Own routine information security tickets and service requests from receipt through resolution, including investigation, communication with users and IT teams, accurate documentation, and follow-up on escalated items. (15%)
• Conduct routine vulnerability-management activities by reviewing and prioritizing scan findings using established criteria, coordinating remediation with responsible IT teams, tracking corrective actions, and validating closure. (10%)
• Investigate common security incidents, collect and preserve relevant evidence, execute containment and remediation actions authorized by established playbooks, and document outcomes for post-incident review. Escalate incidents requiring advanced analysis or decisions outside defined authority. (10%)
• Complete assigned cybersecurity project activities, including implementation of approved controls, testing, deployment coordination, and verification of operational requirements. (10%)
• Maintain accurate security procedures, incident records, operational metrics, tool administration records, and compliance evidence for assigned activities. (5%)
• Identify recurring security issues and opportunities to improve procedures, alert handling, and tool operation; recommend changes and implement approved improvements. (5%)
• Maintain knowledge of emerging threats, security technologies, and applicable practices through continuing education and professional development. (5%)

This position does not supervise others. May provide guidance to interns or junior team members on routine operational tasks as assigned but does not have formal supervisory responsibilities.

Qualifications

Minimum Qualifications (Required)

Education:

Associate's degree in Information Security, Information Systems, Computer Science, or a related field and at least three (3) years of progressively responsible Information Technology or Cybersecurity experience; OR a high school diploma/GED and at least five (5) years of progressively responsible Information Technology or Cybersecurity experience. Either pathway must include at least one (1) year performing cybersecurity activities such as security monitoring, incident investigation, security tool administration, or vulnerability management.

Licenses/Certifications:

At least one current industry certification demonstrating applied knowledge in cybersecurity, networking, systems administration, cloud technologies, or enterprise IT operations is required at the time of hire. Acceptable certifications include CompTIA Security+, CySA+, Cisco CCNA, SSCP, GSEC, relevant Microsoft role-based Associate certifications, AWS Associate certifications, or comparable credentials. Equivalent certifications must align with the position's responsibilities and demonstrate knowledge beyond introductory IT concepts.

Experience:

Experience administering or troubleshooting enterprise IT or security technologies, analyzing security alerts or logs, resolving technical requests, and documenting findings. Demonstrated ability to independently perform routine cybersecurity activities within established procedures and coordinate corrective actions with other IT teams.

Other Required Skills/Knowledge:

Working knowledge of security monitoring, incident investigation and escalation, endpoint and email protection, vulnerability management, and enterprise IT environments. Ability to prioritize assignments, recognize issues requiring escalation, and communicate findings clearly to technical and non-technical audiences.

Preferred Qualifications

• Additional cybersecurity certifications beyond the minimum required (e.g., CySA+, SSCP, GSEC, Microsoft Security certifications).
• Experience with cybersecurity frameworks such as NIST Cybersecurity Framework, CIS Critical Security Controls, or MITRE ATT&CK.
• Experience with SIEM platforms, endpoint protection, vulnerability management tools, identity management, or cloud security technologies.
• Experience supporting compliance initiatives within a healthcare or regulated environment.

Analytical thinking and problem solving; attention to detail; sound technical judgment; initiative and accountability; collaboration and customer service; organization and time management; clear written and verbal communication; ability to manage competing priorities; adaptability and continuing professional development.

Language Skills

• Ability to read, analyze, and interpret technical documentation, policies, and procedures.
• Ability to communicate effectively in English with technical and non-technical audiences.

Microsoft 365 and Office applications; endpoint protection; SIEM and enterprise logging; email and web security gateways; vulnerability management platforms; Active Directory and identity technologies; enterprise desktop, server, and network environments; service management and ticketing systems.

Work Environment and Physical Demands

• Typical work setting: Primarily office-based within MHM facilities with occasional travel to local sites.
• Travel expectations: Up to 15% local travel. Must maintain a valid driver's license, required automobile liability insurance, and access to a vehicle.
• Physical requirements: Requires bending, stooping, twisting, turning, walking, sitting, standing, and occasional climbing of step stools. Must be able to lift and maneuver up to 25 pounds.