Hybrid Incident Response Analyst (Healthcare Security)

Alignment Healthcare Inc.; Orange (CA); Hybrid; USD 64,000 - 97,000; Full time

Job summary

Alignment Health is seeking an Incident Response Analyst to monitor, triage, and escalate security alerts across our information systems. The role focuses on containment decisions, phishing investigations, and collaboration with Information Security, IT Operations, and Compliance to protect member data under HIPAA/HITRUST.

The position requires 1–2 years in security operations, experience with EDR/SIEM, and the ability to document investigations and drive threat hunting initiatives.

Qualifications

• 1–2 years of hands-on IT, help desk or security operations experience.
• Experience with investigating security alerts using EDR and documenting dispositions.
• Ability to query and correlate logs in SIEM/log-analytics platforms.
• Experience evaluating evidence of compromise and making containment decisions.
• Ability to recognize recurring false positives and tune detections.
• Familiarity with threat intelligence and applying indicators to blocking policies.

Responsibilities

• Triage and Investigate Security Alerts using EDR and document reasoning behind dispositions.
• Respond to and Contain Confirmed Threats, restricting hosts or accounts when needed.
• Investigate and Triage Phishing Reports using email security tools.
• Query and correlate logs in SIEM for investigations and audits.
• Apply Threat Intelligence to detection and blocking, proposing architectural changes.
• Tune Detection Rules to suppress false positives and improve accuracy.
• Document Incidents and Escalate with a clear rationale following NIST 800-61.

Skills

Cyber Incident Response

SIEM / Log Analytics

EDR Platform Operations

Vulnerability Assessment

Threat Intelligence

Analytical Judgment

Education

Associate degree in CS/InfoSec or related

Bachelor's degree in CS/Engineering/Cybersecurity

Tools

CrowdStrike Falcon

SentinelOne

Microsoft Defender for Endpoint

Splunk

Microsoft Sentinel

Rapid7 InsightIDR

Elastic Security

Job description

Alignment Health is seeking an Incident Response Analyst to monitor, triage, and escalate security alerts across our information systems. The role focuses on containment decisions, phishing investigations, and collaboration with Information Security, IT Operations, and Compliance to protect member data under HIPAA/HITRUST.

The position requires 1–2 years in security operations, experience with EDR/SIEM, and the ability to document investigations and drive threat hunting initiatives.