[Remote] Security Analyst

Note: The job is a remote job and is open to candidates in USA. Marathon Health is a leading provider of advanced primary care in the U.S., serving millions of patients. The Security Analyst will work closely with the SOC to ensure efficient response to security incidents and vulnerabilities, while driving security initiatives and program maturity.

Responsibilities

• Configure and optimize security tools and software
• Review daily and historical data to identify, report, and remedy vulnerabilities
• Document, prioritize, and analyze security threats, incidents, and key metrics
• Regular review of security logs, reports, and other information from both internal and external sources to identify and manage security risks and issues
• Evaluate security controls of proposed vendor products and service providers
• HITRUST, SOC2, PCI DSS assessment, remediation, documentation, and certification activities
• Assist in design and execution of security related training programs and communications
• Verify and monitor that laptops and other devices have the appropriate security tools installed, operating, and updated
• Investigate, document, and remedy security events
• Create and manage Incident Response playbooks and IT Security Procedures
• Root Cause Analysis
• Collaborate with cross-functional teams, including Technology, Operations, Legal, Privacy, Finance, and HR, regarding security
• Stay informed on emerging technologies and services to ensure Marathon maintains its competitive technical advantage

Skills

• Bachelor's degree in computer science, Information Technology, Cybersecurity, Data Science or a related field
• 1-3 years combined experience in broader IT and Security roles or equivalent combination of education and experience
• Security certifications related to job responsibilities are highly desirable (e.g. Sec+, CEH, CASP, CISSP)
• Hands on experience with security event triage, Windows OS, networking, SIEM, Incident Response, Server and endpoint hardening, application security best practices
• Specific experience with Microsoft Defender, Cisco, Meraki, Dell laptops, AWS, Salesforce, Microsoft 365, Smartsheet, and PowerShell
• Working knowledge of privacy and security standards (e.g., HIPAA, HITRUST, NIST)
• Creative problem-solving skills and experience investigating suspicious activities
• Exceptional written and verbal communication skills, with the ability to engage and collaborate across all levels of the organization
• Demonstrated capacity to translate technical security events into clear, non-technical language for diverse audiences
• Curious and willing to learn new skills through self-improvement
• Collaborative mindset, with the ability to work effectively across diverse teams and stakeholders, fostering strong relationships and alignment
• Proficiency with Microsoft Office tools, particularly strong expertise in Excel, for data analysis, reporting, and compliance

Benefits

• Free Marathon membership for in person and virtual care
• Employer paid life and disability insurance
• Choice in medical/dental plans
• Vision
• Employer funded HSA
• FSA
• Voluntary illness, accident and hospitalization plans
• Competitive compensation
• 401k match
• Access to financial coaching through our Employee Assistance Program
• Paid time off for vacation
• Sick leave
• Holiday schedule

Company Overview

Company H1B Sponsorship