Cyber Incident Response Analyst - Proactive Threat Defender

Ardent Health; Brentwood (TN); On-site; USD 90,000 - 120,000; Full time

Job summary

Ardent Health in Brentwood, TN is seeking an Information Security Analyst – Incident Response to defend against cyber-attacks and intrusions. The role handles incident response from initiation to closure, enforcing security policies to protect patient data and infrastructure.

You will monitor security events, follow playbooks, participate in drills, contribute to reports, and help build tools for incident response.

Qualifications

• Associates degree or equivalent cybersecurity training/experience.
• Knowledge of Windows/Linux forensics, regex, Powershell, Bash, Javascript, Python, SQL, AD, networking protocols.
• Familiarity with MITRE ATT&CK, NIST SP 800-61/800-53, ISO 27001.
• Experience with security platforms (SIEM, EDR, email security gateway).
• Knowledge of attack vectors, remediation methods, and incident handling.
• ITIL familiarity; ability to manage incidents, requests and changes.
• Excellent problem solving and collaboration with IT and business teams.

Responsibilities

• Monitors and acts on security incidents.
• Follows incident response processes, procedures, and playbooks.
• Participates in tabletop exercises / training.
• Contributes to incident reports and maintain incident logs.
• Builds /Maintains an incident response toolkit.
• Research and recommend solutions that meet security standards while ensuring functionality for business continuity.
• Assists in development of disaster recovery and contingency plans.
• Works closely with Threat and Vulnerability team using purple team process, procedures and exercises.

Skills

Windows/Linux forensics

Regular expressions

Cybersecurity knowledge

MITRE ATT&CK familiarity

SIEM experience

EDR experience

Incident response

ITIL familiarity

Problem solving

Team collaboration

Education

Associates degree or equivalent cybersecurity training/experience

Tools

SIEM

EDR

Email security gateway

Job description

Ardent Health in Brentwood, TN is seeking an Information Security Analyst – Incident Response to defend against cyber-attacks and intrusions. The role handles incident response from initiation to closure, enforcing security policies to protect patient data and infrastructure.

You will monitor security events, follow playbooks, participate in drills, contribute to reports, and help build tools for incident response.