Remote Cyber Security Lead — SOC, SIEM & IR

Franciscan Alliance, Inc.; Indiana; Remote; USD 97,000 - 133,000; Full time

Job summary

Franciscan Alliance is seeking a Cyber Security Specialist Lead to oversee cyber incident response, threat hunting, and SIEM operations. The role emphasizes hands-on detection development, SOC leadership during incidents, and collaboration with security teams across the healthcare environment.

The position favors Splunk experience, SOAR playbook creation, and a background in healthcare IT security, with a flexible work arrangement in Indiana.

Qualifications

• Associate's Degree required.
• Bachelor's Degree preferred.
• Certificate preferred.
• 8 years Information Technology or Information Security experience required.
• 5 years Healthcare security operations experience preferred.

Responsibilities

• Monitor and investigate cyber incidents in the network environment.
• Write SPL queries to detect threats and hunt for anomalies.
• Develop detections, reduce false positives, and tune alerts.
• Lead SOC during high-severity incidents and coordinate response.
• Develop and execute SOAR playbooks for automated responses.
• Collaborate with internal and external teams for tests and policy reviews.

Skills

Splunk experience

Incident response

SOC operations

Threat hunting

Education

Associate's Degree

Bachelor's Degree

Certificate

Tools

Splunk

SIEM

Job description

Franciscan Alliance is seeking a Cyber Security Specialist Lead to oversee cyber incident response, threat hunting, and SIEM operations. The role emphasizes hands-on detection development, SOC leadership during incidents, and collaboration with security teams across the healthcare environment.

The position favors Splunk experience, SOAR playbook creation, and a background in healthcare IT security, with a flexible work arrangement in Indiana.