Security Analyst

Spectrum Health & Human Services

Agency Profile:  Spectrum Health & Human Services respectfully partners with adults, children, and families as they recover from behavioral, emotional, mental health, and/or substance-related disorders by offering individualized and meaningful opportunities of hope, empowerment, and support to achieve self-defined improvements in their quality of life.

LOCATION: 227 Thorn Ave, Orchard Park NY, THIS IS NOT A REMOTE POSITION, YOU MUST COMMUTE TO ORCHARD PARK NY

SUMMARY OF POSITION FUNCTION:

Spectrum Health & Human Services is seeking a detail-oriented Security Analyst to help protect our healthcare organization's systems, data, and patient information. This role is responsible for monitoring security events, investigating potential threats, supporting compliance initiatives, and helping maintain a strong cybersecurity posture across clinical, administrative, and technology environments. The ideal candidate understands cybersecurity fundamentals, healthcare data privacy requirements, and the importance of protecting sensitive patient information in accordance with HIPAA and other applicable regulations.

MAJOR DUTIES AND RESPONSIBILITIES: 

• Security monitoring and incident response tools: SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar; EDR/XDR tools such as CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, or Carbon Black; IDS/IPS; SOAR workflows; and case management or ticketing systems such as ServiceNow or Jira.
• Network and infrastructure security: firewalls, VPNs, secure web gateways, DNS filtering, email security gateways, vulnerability scanners, endpoint hardening, Active Directory, Windows and Linux systems, and basic TCP/IP, routing, and network troubleshooting.
• Cloud and SaaS security: Azure, AWS, or Google Cloud security controls; Microsoft 365 security and compliance tools; identity providers; MFA; conditional access; cloud logging; and secure configuration reviews.
• Healthcare security environment: HIPAA-regulated data, electronic health record platforms, clinical applications, medical device networks, third-party vendor access, and protection of protected health information across clinical and administrative workflows.
• Hands-on security operations: alert triage, log analysis, phishing investigation, malware containment, account compromise investigation, vulnerability validation, threat hunting, evidence collection, and remediation follow-up.

Core Competencies

• Sound judgment when handling protected health information, sensitive security data, and time-sensitive incidents in a regulated healthcare environment.

EDUCATION REQUIREMENTS:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.

EXPERIENCE:

COMPENSATION: $68,000- $85,000/ annually