Security Analyst

Brooksource; Minneapolis (MN); On-site; USD 65,000 - 90,000; Full time

Job summary

Brooksource, on behalf of a healthcare client, seeks an Associate Security Analyst to join the Cybersecurity Operations team. You will monitor, analyze, and respond to security alerts across systems, networks, and cloud environments, while supporting vulnerability management and incident response.

This early-career role offers hands-on experience protecting critical healthcare systems and patient data, with focus on compliance and regulatory requirements in a regulated setting.

Qualifications

• Bachelor's degree or equivalent work experience in a related field.
• 1–3 years in information security, cybersecurity operations, IT infrastructure, or related role.
• Foundational understanding of security operations, threat detection, and incident response.
• Familiarity with TCP/IP, DNS, VPNs, and network segmentation.
• Knowledge of IAM and RBAC concepts and practical application.
• Strong analytical, troubleshooting, and communication skills.
• Ability to work effectively in a fast-paced, regulated healthcare environment.

Responsibilities

• Monitor, analyze, and respond to security alerts from monitoring platforms.
• Investigate incidents, perform triage, and escalate as needed.
• Conduct vulnerability assessments and support remediation efforts.
• Maintain and operate security tools, technologies, and infrastructure.
• Assist in deploying, updating, and decommissioning security solutions.
• Monitor networks, databases, cloud environments, and web systems for threats.
• Participate in incident response activities including documentation and resolution.
• Support access provisioning, deprovisioning, and periodic reviews.
• Collaborate with infrastructure, application, and cloud teams on security best practices.
• Maintain audit-ready documentation to support compliance initiatives.
• Research emerging threats to strengthen defenses.
• Assist with firewall, endpoint, and IDS/IPS administration.
• Fulfill security-related service requests and support security processes.
• Leverage AI-enabled tools to enhance productivity and workflow efficiency.

Skills

Security concepts

Incident response

Threat detection

Analytical skills

Troubleshooting

Communication

IAM basics

RBAC basics

Networking fundamentals

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

Nessus

Burp Suite

Splunk

Terraform

Docker

AWS / Azure / GCP

Job description

Our healthcare client is seeking an Associate Security Analyst to join their Cybersecurity Operations team. This role is responsible for monitoring, maintaining, and improving the organization's security posture across systems, networks, applications, and cloud environments. The ideal candidate will have a foundational understanding of cybersecurity principles, incident response, vulnerability management, identity and access management, and security operations.

This position offers an excellent opportunity for an early-career cybersecurity professional to gain hands-on experience protecting critical healthcare systems and sensitive patient information while supporting compliance and regulatory requirements.

Key Responsibilities:

• Monitor, analyze, and respond to security alerts generated by security monitoring and detection platforms.
• Investigate potential security incidents, perform initial triage, and escalate issues as appropriate.
• Conduct vulnerability assessments and assist with remediation efforts to reduce organizational risk.
• Support the operation and maintenance of security tools, technologies, and infrastructure.
• Assist in deploying, updating, replacing, and decommissioning security solutions.
• Monitor networks, databases, cloud environments, and web-based systems for security threats and unauthorized access attempts.
• Participate in incident response activities, including investigation, documentation, and resolution of security events.
• Support provisioning, deprovisioning, and periodic access reviews to ensure users have appropriate access based on business needs.
• Partner with infrastructure, application, and cloud teams to implement security best practices.
• Maintain audit-ready documentation and support compliance initiatives.
• Research emerging cybersecurity threats, vulnerabilities, and attack techniques to proactively strengthen defenses.
• Assist with firewall, endpoint security, and intrusion detection/prevention system administration.
• Fulfill cybersecurity-related service requests and support operational security processes.
• Leverage AI-enabled tools and technologies to enhance productivity, streamline workflows, accelerate decision-making, and drive continuous improvement in day-to-day responsibilities.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent work experience.
• 1-3 years of experience in information security, cybersecurity operations, IT infrastructure, or a related technical role.
• Basic understanding of security operations, threat detection, and incident response processes.
• Familiarity with networking concepts including TCP/IP, DNS, VPNs, and network segmentation.
• Understanding of security principles related to identity and access management (IAM) and role-based access control (RBAC).
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written, verbal communication and active listening skills.
• Ability to work effectively in a fast-paced and highly regulated healthcare environment.

Preferred Qualifications:

Experience with one or more of the following:

• Vulnerability management tools such as Nessus or Burp Suite
• Security Information and Event Management (SIEM) solutions such as Splunk
• Infrastructure as Code (IaC) tools including Terraform
• Container technologies such as Docker
• Identity and Access Management (IAM) platforms
• Firewall, IDS/IPS, and endpoint protection technologies
• Cloud security within AWS, Azure, or Google Cloud Platform (GCP)
• Security frameworks and compliance standards such as NIST, CIS Controls, or SOC 2