Security Analyst

About Vimo:

Vimo is a national leader in state-based health insurance exchanges and safety-net transformations. We partner with state agencies across the country to expand access to affordable health coverage and modernize the delivery of essential human services, including Medicaid, SNAP, TANF, child-care, child support, child welfare, and unemployment insurance. Our enterprise-grade SaaS platforms power mission-critical systems that serve millions of people every day. By combining cutting-edge technology with process optimization, we help states deliver vital public benefits efficiently, securely, and at scale.

At Vimo, we create practical, real-world solutions that make a measurable difference in people's lives. If you're driven by meaningful, high-impact work at the intersection of technology and public service, Vimo may be the place for you.

About The Role:

As a Security Analyst, you will be a crucial member of our Security Operations Center (SOC), responsible for monitoring, analyzing, and responding to security events across our network. You'll work closely with other team members to identify and mitigate threats, ensuring the ongoing protection of our systems and data.

What You'll Do:

• Setting up Monitoring tools etc as needed.

• Monitor security alerts and events using SIEM tools (SPLUNK, Wazuh) and other security monitoring systems.

• Conduct initial triage and investigation of potential security incidents.

• Analyze logs from various sources (e.g., firewalls, IDS/IPS, endpoint protection systems).

• Escalate incidents as needed, working with senior analysts and other teams to coordinate response efforts.

• Assist in the development and implementation of security policies, standards, and procedures.

• Perform vulnerability assessments and collaborate on remediation efforts.

• Contribute to the continuous improvement of SOC processes and tools.

Benefits:

Our comprehensive benefits package includes:

• Health, dental, life, disability, and vision insurance

• Health care spending or reimbursement accounts (FSA)

• Retirement benefits (401k)

• Paid time off

• Education assistance or tuition reimbursement

• Employee discounts for gym memberships and commuting/travel assistance

Our Values:

• We believe that working hard, when it is imbued with purpose, can and should be fun.
• You'll find we are a "can do" place where people work together and roll up their sleeves to get the job done.
• Everyone has a voice; everyone's ideas count, and everyone is respected.
• We have built a company, as well as a community of friends and colleagues, with respect for each other.

Information Security & Data Protection:

• This role may involve access to sensitive or regulated information. The candidate is expected to handle all data in accordance with company security, privacy, and data protection policies.
• Compliance with access control, data classification, and applicable legal and regulatory requirements is required.

Learn more at vimo.com.

What we're looking for:

• 6+ years of experience working with security-monitoring tools (security monitoring tools (e.g., SIEM, IDS/IPS)

• Strong understanding of fundamental security concepts, including threat vectors, attack methods, and mitigation strategies.

• Familiarity with the MITRE ATT&CK framework for understanding and responding to adversary tactics and techniques.

• Expertise in AWS Security -working with IaaC, IAM, Security Groups, Guard Duty,

• Familiarity with incident response procedures and best practices.

• Knowledge of network protocols and infrastructure.

• Basic experience with log analysis and correlating security events.

• Strong analytical and problem-solving skills.

• Excellent communication skills, both written and verbal.

• Ability to work in a fast-paced environment and manage multiple priorities.

Bonus Skills:

• Knowledge of cloud security principles and best practices (e.g., AWS, Azure, GCP).

• Experience with cloud security tools and technologies.

• Experience in vulnerability management, including performing vulnerability assessments and coordinating remediation efforts.

• Certifications such as CompTIA Security+, AWS Certified Security - Specialty, or similar are a plus.

• Familiarity with regulatory requirements and compliance frameworks (e.g., GDPR, HIPAA, PCI-DSS).