Pixel Health

Pixel Health

·14 hours ago

Security analyst

Apply now

Location

remote, United States

Salary

$105k/yr

Commitment

Full Time

Level

Middle (2-4 years)

Required skills

Security monitoringIdentity governanceCompliance supportIncident responseVulnerability managementPolicy draftingRisk assessmentSecurity awarenessTechnical documentationAccess reviewsPhishing responseAuthentication standardsHIPAA complianceNIST CSFCIS ControlsPCI DSS

Job Description

Job Description

COMPANY OVERVIEW

Pixel Health bridges healthcare and technology by helping clinical and IT teams improve communication, strengthen IT workflows, and keep healthcare workers focused on patient care.

We look for people who solve problems creatively, act with integrity, collaborate well, and are eager to learn. Pixel Health supports employee growth through meaningful work, team support, and opportunities to build new skills.

POSITION SUMMARY

The Security Analyst is responsible for the day-to-day operation of security monitoring, identity governance support, and compliance support. The role investigates and resolves security events, advises on access and authentication standards, and prepares and maintains the documentation and evidence that demonstrate compliance with regulatory and client requirements. The position serves as the first point of contact for routine security matters.

ESSENTIAL DUTIES AND RESPONSIBILITIES

SECURITY OPERATIONS

  • Monitor, triage, and investigate security events across endpoint, email, and managed detection and response sources.
  • Contain and remediate security events using approved procedures, and escalate incidents that exceed defined thresholds.
  • Perform identity containment actions, such as account lockout, session revocation, and authentication reset.
  • Respond to reported phishing and suspicious activity.
  • Coordinate vulnerability management activities, including prioritization, remediation tracking, and status reporting.
  • Document incidents and prepare summaries for management review.
  • Conduct periodic access reviews and report exceptions.
  • Review privileged access, application control, and credential management requests against established policy, and escalate exceptions.

GOVERNANCE, RISK, AND COMPLIANCE

  • Draft and revise policies, procedures, and supporting standards for management review and approval.
  • Maintain the policy and procedure library, including versioning and the annual review cycle.
  • Prepare client-ready documentation and supporting materials for management to present.
  • Participate in risk assessments and audits by gathering evidence, performing control checks against defined criteria, and documenting observations. Ratings and conclusions are determined by management.
  • Prepare responses to client security questionnaires and due diligence requests from approved content, and route new or non-standard questions for review.
  • Administer the security awareness program, including assignment, completion tracking, and follow-up.
  • Join client discussions in a supporting role as directed by management.

OPERATIONAL SUPPORT AND DOCUMENTATION

  • Manage security work through the ticketing system, maintaining accurate records, priorities, and service levels.
  • Develop and maintain runbooks, procedures, and knowledge base content for recurring security inquiries.
  • Identify recurring issues and recommend process improvements.

QUALIFICATIONS

REQUIRED

  • 3 to 5 years of experience in information security, security operations, or IT support with security responsibilities.
  • Experience investigating security events across endpoint, email, or identity sources.
  • Working knowledge of identity and access management concepts, including multi-factor authentication, conditional access, and least privilege.
  • Familiarity with the HIPAA Security Rule and additional frameworks, such as NIST CSF, CIS Controls, or PCI DSS.
  • Demonstrated ability to write clear policies, procedures, and technical documentation.
  • Strong written and verbal communication, including client-facing summaries.
  • Ability to work independently, prioritize competing demands, and exercise sound judgment on escalation.

PREFERRED

  • Security+ or equivalent certification.
  • Experience in a managed services or healthcare environment.
  • Scripting experience for reporting and automation.
  • Experience completing cyber insurance or vendor security questionnaires.

WORKING CONDITIONS

This is a remote position with standard business hours. The employee must be available for after-hours escalation of critical security incidents and must handle confidential and regulated information in line with HIPAA requirements.

Benefits

  • Competitive Salary
  • Flexible Hours
  • PTO
  • Paid Health, Dental and Vision Insurance
  • Matching 401k Plan
  • Great team-oriented work environment

Salary

$105,300.00 per year

Ready to join the team?

Apply now

Similar Jobs: