Security Operations Analyst I

As a Security Operations Analyst I youll play a critical role in protecting Modivcares technology environment by monitoring investigating and responding to cybersecurity events across the enterprise. Youll serve as a frontline member of our Security Operations team helping identify potential threats triage security alerts and support incident response activities while partnering with Security Engineering IT Operations and Governance Risk & Compliance teams.

In this role youll help strengthen our overall security posture by monitoring security tools improving detection capabilities supporting vulnerability management and assisting with regulatory compliance initiatives. Youll gain hands-on experience across a broad range of cybersecurity technologies while helping ensure our systems remain secure reliable and available for the members and clients we serve.

This is an excellent opportunity for someone looking to build a career in cybersecurity who enjoys solving technical problems learning new technologies and working in a collaborative environment where security is a top priority.

• Monitor investigate and triage security alerts generated from enterprise security platforms and monitored systems.
• Perform Tier I analysis of security events determine appropriate response actions and escalate incidents to Security Engineering when necessary.
• Partner with the Security Operations Center (SOC) and Managed Security Service Providers (MSSPs) to improve alert quality detection coverage and response processes.
• Develop maintain and enhance security alerting rules monitoring configurations dashboards and operational playbooks.
• Monitor endpoint protection cloud environments SaaS applications and other security controls to ensure effective coverage across the enterprise.
• Assist with security investigations incident response activities penetration testing efforts and vulnerability management initiatives.
• Produce recurring reports and dashboards that track security events trends key performance indicators (KPIs) and overall security posture.
• Support compliance initiatives by assisting with evidence gathering and reporting for HIPAA HITRUST SOC 2 SOX and other regulatory requirements.
• Partner with Information Security IT Operations IT Risk and Governance Risk & Compliance teams to improve operational security and reduce organizational risk.
• Participate in an on-call rotation to support security monitoring and incident response outside of normal business hours.
• Document security procedures incident response activities monitoring configurations and changes within the IT Service Management (ITSM) platform.
• Stay current on emerging cybersecurity threats technologies and industry best practices while continuously improving operational effectiveness.
• Participate in other projects and perform additional duties as assigned.

• Bachelors degree in Computer Science Cybersecurity Information Security Computer Engineering or a related technical field required.
• Zero (0) or more years of cybersecurity information technology or related experience.
• Foundational knowledge of cybersecurity concepts security operations and incident response principles.
• Working knowledge of Active Directory Windows Server Windows operating systems AWS Linux and TCP/IP networking.
• Strong analytical troubleshooting and critical thinking skills with the ability to investigate technical issues.
• Excellent written and verbal communication skills with strong documentation abilities.
• Ability to prioritize work manage multiple tasks and perform effectively in a fast-paced environment.
• Experience with SIEM platforms endpoint security tools vulnerability management or cloud security technologies preferred.
• Industry certifications such as CompTIA Security GIAC CySA CISSP CRISC or other cybersecurity certifications are preferred.
• Or an equivalent combination of education and/or experience.