Security Analyst

Indiana Hemophilia & Thrombosis Center, Inc.

. Administer the enterprise Vulnerability Management Program across endpoints, servers, databases, and hybrid cloud infrastructure .

Posted 11/7/2026full-timeIndianapolis • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in administering Vulnerability Management Programs, coordinating compliance with HIPAA, URAC, NIST CSF 2.0, and PCI DSS v4.0, and managing security awareness training. Proficient in analyzing security alerts and collaborating with IT Operations and Cloud & DevOps teams to enhance security measures.

Highest-signal resume keywords

Vulnerability ManagementCybersecurity OperationsHIPAA ComplianceSecurity Awareness TrainingCloud Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ScanningThreat Intelligence AnalysisRemediation WorkflowsSecurity AuditsAccess Control ManagementPhishing InvestigationEndpoint HardeningAWS SecurityActive Directory ManagementData Governance

Soft Skills

CollaborationCommunicationAnalytical ThinkingProblem-SolvingAttention to Detail

Tools & Technologies

EDR SystemsCloud WorkloadsIdentity ProvidersEmail Filtering SystemsSecurity Configuration LogsAudit Evidence ToolsPhishing Simulation Tools

Industry Keywords

Healthcare ITCybersecurityRisk ManagementCompliance StandardsOperational Risk

Tech Stack

Tools & technologies

AWSCloudCyber Security

About the role

Key responsibilities & impact

Administer the enterprise Vulnerability Management Program across endpoints, servers, databases, and hybrid cloud infrastructure
Coordinate vulnerability scanning, analyze scan data, and validate findings against threat intelligence and operational risk
Track, prioritize, and validate remediation workflows for critical and high vulnerabilities
Document and track risk exceptions and remediation roadblocks
Serve as primary technical point of contact for the external MSSP
Monitor, analyze, and triage security alerts across EDR, cloud workloads, identity providers, and email filtering systems
Investigate and remediate employee phishing submissions and suspected compromised credential alerts
Evaluate safeguards against HIPAA, URAC, NIST CSF 2.0, and PCI DSS v4.0 requirements
Coordinate technical compliance artifacts, audit evidence, and system configuration logs for audits and accreditation renewals
Conduct audits of access control lists, privileged user activity, and third-party vendor access
Administer monthly security awareness training and simulated phishing campaigns
Track training completion, phish-prone percentages, and compliance metrics
Collaborate with HR and Compliance on training delinquencies and phishing failures
Partner with IT Operations on endpoint hardening, Windows Server security baselines, and Active Directory hygiene
Collaborate with Cloud & DevOps on AWS security groups, IAM least privilege, container/pipeline security, and AWS network infrastructure
Interface with Application and Data teams on software risks, database access governance, API integrations, and secure data handling

Requirements

What you’ll need

Minimum Associate's degree in related field
3 to 5 years of progressive experience in Cybersecurity operations or a related field
6 to 8 years of progressive experience in Cybersecurity operations as an alternative to the minimum experience requirement
Healthcare IT experience strongly preferred
Valid driver’s license and insured automobile required
Must enable multi-factor authentication via a personal smart phone/smart device to access IHI systems
Must reside in the State of Indiana
Requires routine presence at the Center in Indianapolis, Indiana
Bachelor’s degree preferred

Benefits

Comp & perks

Competitive salary and benefit package
Dedicated on-site multidisciplinary staff
Access to new therapies through the IHTC research program
Opportunity to improve care through participation in clinical research