Remote Security Analyst — Cloud, Compliance & IR

Private Health Management, Inc.; Oregon; Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Annual cash incentive program

401k with match

Flexible PTO

PHM for PHM

Job summary

Private Health Management, Inc. is seeking a hands-on Security Analyst to join the Tech/InfoSec team.

You will own day-to-day security operations, monitor detections, manage access governance, and coordinate with vendors and MSPs to improve protections across cloud and SaaS services. You\'ll investigate incidents across CrowdStrike Falcon, Okta, Microsoft 365, Entra ID, and related platforms, document findings, and drive remediation with internal teams.

Qualifications

• Strong investigative reasoning and decision-making in security incidents.
• Ability to prioritize risks based on impact and exploitability.
• Clear written communication for incident docs and executive summaries.
• Proven ownership and ability to drive cross-team work.

Responsibilities

• Investigate detections across security tools and document findings.
• Prioritize vulnerabilities and drive remediation with internal teams and vendors.
• Maintain provisioning verification, access reviews, and runbooks for repeatable processes.
• Improve detection coverage, cloud security, and audit readiness with SOC 2/HITRUST evidence.

Skills

Investigative reasoning

Risk prioritization

Written communication

Ownership & judgment

Tools

CrowdStrike Falcon

Okta

Microsoft 365

Entra ID

Microsoft Purview

Zscaler

Box

KnowBe4

Job description

Private Health Management, Inc. is seeking a hands-on Security Analyst to join the Tech/InfoSec team.

You will own day-to-day security operations, monitor detections, manage access governance, and coordinate with vendors and MSPs to improve protections across cloud and SaaS services. You\'ll investigate incidents across CrowdStrike Falcon, Okta, Microsoft 365, Entra ID, and related platforms, document findings, and drive remediation with internal teams.