Cyber Security Analyst

The Cybersecurity Analyst operates as a cross-functional security role responsible for integrating Security Operations (SIEM/SOC), and Governance, Risk & Compliance (GRC). This role goes beyond alert monitoring and provides assistance with security strategy execution, audit leadership (SOC 1/2, HIPAA), risk management, and security decisions.

The analyst serves as a subject matter expert on threat detection and security frameworks. This position plays a critical role in aligning technical controls with regulatory requirements and business risk.

• Monitor, analyze, and respond to security alerts using SIEM, Microsoft/Azure, email protection, endpoint protection and user reports. Ensuring security incidents are properly discovered, contained, eradicated, recovered, and documented.

• Develop, tune, and maintain SIEM correlation rules, alerts, and dashboards to improve detection capabilities.

• Perform log analysis across multiple sources (e.g., endpoints, firewalls, identity providers, email systems, cloud platforms).

• Lead incident detection, triage, and response efforts across identity, endpoint, network, and cloud environments

• Leverage SIEM data for investigation, timeline reconstruction, and root cause analysis.

• Assist and coordinate external audits including SOC 1 / SOC 2 and HIPAA risk assessments.

• Ensure audit readiness and continuous compliance across all security domains.

• Develop, maintain, and enforce security policies, standards, procedures, and documentation.

• Implement, tune, and maintain enterprise risk assessments and track remediation across business units.

• Provides expertise and approval on applications and software for organization and ensures frontline processes and solutions maintains confidentiality, integrity and availability.

• Ensure authorized access protocols are followed, investigate improper access, report violations, and monitor the following logs: SIEM, On-Prem Active Directory, Azure Active Directory, and Office 365.

• Assist with risk prioritization through risk assessments.

• Ensures information security is compliant with policies, procedures, and state contracts.

• Leads security decisions of major network installations and upgrades.

• Implements cyber security strategies, solutions, and risk mitigation.

• Research emerging technologies which support IT security enhancement and development efforts

• Monitors industry websites or publications for information about patches, releases, viruses, or potential problem identification.

• Lead investigations into phishing, business email compromise, account takeovers.

• Works closely with Tier III Help Desk Technician resolving Tier III tickets.

• Develop and deliver organization-wide security awareness training.

• Lead Cybersecurity KPIs for business security posture, incident response, and user risk.

• Conduct phishing simulations and track behavioral risk metrics.

• Mentor and provide technical guidance to junior cybersecurity analysts when applicable.

• Drive continuous improvement of the security program and team capabilities.

• Implements Saint Francis Ministries policies and follow directives as required. Follows and adheres to all pertinent Saint Francis Ministries Standard Operating Procedures (SOP’s), rules, personnel policies, and procedures; related accreditation and licensure standards; and federal, state, and local rules, statutes, regulations, and contractual terms.

• Is knowledgeable of and follows all safety procedures.

• Reports unusual incidents through appropriate Risk Management, clinical and safety channels.

• Ensures clients’ rights are protected.

• Bachelor’s degree in cyber security with 1 year of Cybersecurity experience or 2 years of Cybersecurity experience with an associate degree in Cyber Security/Computer Science

• Certification (s) such as Network +, Security + or preferred but not required CySA+, PenTest+

• 2-3 years or a combination of education and experience in Cyber Security/IT. Must have experience with Microsoft Azure, Barracuda Email Protection

• Must be 21 years of age.

• Must pass a drug screen, MVR, KBI, Child Abuse and Neglect Central Registry Clearance check and an Adult Registry Check

• FBI Fingerprint check

• Lifting requirement of 50 lbs.

• Must have a valid driver’s license, acceptable driving record and reliable transportation.