Information Security Analyst

Gifthealth

. Monitor and investigate security alerts from endpoint, identity, email, cloud, and other security technologies .

Posted 9/18/2026full-timeRemote • Ohio • United StatesJuniorMid-Level💰 $73,000 - $86,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security incident response, vulnerability management, and endpoint security, with a strong ability to analyze security alerts and logs. Proficient in developing security procedures and maintaining compliance with regulatory standards.

Highest-signal resume keywords

Security Incident ResponseVulnerability ManagementEndpoint SecurityEDR/MDR PlatformsSecurity Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseVulnerability ManagementSecurity LoggingPhishing InvestigationSecurity MonitoringLog InterpretationScriptingAutomationTechnical DocumentationSecurity Audits

Soft Skills

Communication SkillsDocumentation Skills

Tools & Technologies

SentinelOneTenableProofpointOktaAWSVantaFreshservice

Certifications & Qualifications

Security+CySA+GSECSSCP

Industry Keywords

NISTCIS ControlsSOC 2PCI DSSHIPAA

Tech Stack

Tools & technologies

AWSCloudCyber SecurityITSMLinuxMacOSPython

About the role

Key responsibilities & impact

Monitor and investigate security alerts from endpoint, identity, email, cloud, and other security technologies
Perform initial triage and investigation of suspected security incidents
Escalate security events according to severity and incident response procedures
Support containment, remediation, recovery, and post-incident activities
Maintain records of security investigations, findings, and response actions
Develop and maintain security incident response procedures and playbooks
Participate in security and tabletop exercises
Review vulnerability scans and prioritize findings based on severity, exploitability, asset criticality, and business risk
Coordinate vulnerability remediation with IT, Engineering, Infrastructure, and system owners
Track vulnerabilities through remediation, mitigation, or approved risk acceptance
Validate remediation and identify recurring vulnerability trends
Administer and monitor endpoint detection and response, email security, identity security, and related platforms
Investigate suspicious endpoint, authentication, phishing, and email activity
Maintain and improve security monitoring and detection capabilities
Review logs and security telemetry during investigations
Develop or tune detection rules and alerts and identify gaps in security visibility
Work with managed security providers and security vendors when applicable
Track security activities through ticketing and workflow systems
Perform security reviews of new software, tools, and vendor requests, documenting findings in the vendor risk register
Maintain operational security metrics and dashboards
Document recurring security processes and procedures
Support security audits, assessments, and compliance activities with technical evidence
Identify opportunities to automate repetitive security tasks

Requirements

What you’ll need

BA in Computer Science, Cybersecurity, or related field preferred; demonstrated hands-on experience also evaluated
2 to 4 years of hands-on experience operating and tuning security tools in a live production environment
Understanding of endpoint security, identity and access management, vulnerability management, phishing and email security, network security, incident response, and security logging and monitoring
Experience investigating technical security issues across Windows, macOS, Linux, cloud platforms, or enterprise SaaS environments
Ability to interpret logs, alerts, vulnerability findings, and other technical security information
Strong documentation and communication skills
Preferred experience with EDR/MDR, vulnerability management, and email security platforms such as SentinelOne, Tenable, or Proofpoint
Preferred experience with identity and SSO platforms such as Okta and AWS or other public cloud platforms
Preferred experience with security frameworks or regulatory requirements such as NIST, CIS Controls, SOC 2, PCI DSS, or HIPAA
Preferred familiarity with scripting or automation using Python, PowerShell, APIs, or similar technologies
Preferred familiarity with GRC or IT service management platforms such as Vanta and Freshservice
Security+, CySA+, GSEC, SSCP, or equivalent experience preferred
Must be able to work at a computer for extended periods
Must be able to communicate effectively verbally and in writing
Must be able to handle and access sensitive security and system data in compliance with organizational data handling requirements
Must be able to respond to security incidents outside standard working hours when required

Benefits

Comp & perks

Full-time employment
Standard business hours
Opportunity to work with Security, IT, Engineering, and other business teams
Equal employment opportunity and inclusive work environment