Security Analyst

Pixel Health co; United States; Remote; USD 95,000 - 116,000; Full time

Benefits offered by this job

Competitive Salary

Flexible Hours

PTO

Paid Health, Dental and Vision

Matching 401k Plan

Great team environment

Job summary

Pixel Health co is seeking a Security Analyst to monitor security events, support identity governance, and assist with compliance documentation. The role serves as the first point of contact for routine security matters and requires the ability to respond to incidents under established procedures.

This remote, after-hours role emphasizes policy development, runbooks, audits, and client-facing summaries, with HIPAA, NIST CSF, CIS Controls, and PCI DSS guidance guiding daily work.

Qualifications

• 3 to 5 years of experience in information security, security operations, or IT support with security responsibilities.
• Experience investigating security events across endpoint, email, or identity sources.
• Working knowledge of identity and access management concepts, including multi-factor authentication, conditional access, and least privilege.
• Familiarity with the HIPAA Security Rule and additional frameworks, such as NIST CSF, CIS Controls, or PCI DSS.
• Demonstrated ability to write clear policies, procedures, and technical documentation.
• Strong written and verbal communication, including client-facing summaries.
• Ability to work independently, prioritize competing demands, and exercise sound judgment on escalation.

Responsibilities

• Monitor, triage, and investigate security events across endpoint, email, and managed detection and response sources.
• Contain and remediate security events using approved procedures, and upscale incidents that exceed defined thresholds.
• Perform identity containment actions, such as account lockout, session revocation, and authentication reset.
• Respond to reported phishing and suspicious activity.
• Coordinate vulnerability management activities, including prioritization, remediation tracking, and status reporting.
• Document incidents and prepare summaries for management review.
• Conduct periodic access reviews and report exceptions.
• Review privileged access, application control, and credential management requests against established policy, and elevate exceptions.
• Draft and revise policies, procedures, and supporting standards for management review and approval.
• Maintain the policy and procedure library, including versioning and the annual review cycle.
• Prepare client-ready documentation and supporting materials for management to present.
• Participate in risk assessments and audits by gathering evidence, performing control checks against defined criteria, and documenting observations.
• Prepare responses to client security questionnaires and due diligence requests from approved content, and route new or non-standard questions for review.
• Administer the security awareness program, including assignment, completion tracking, and follow-up.
• Join client discussions in a supporting role as directed by management.
• Manage security work through the ticketing system, maintaining accurate records, priorities, and service levels.
• Develop and maintain runbooks, procedures, and knowledge base content for recurring security inquiries.
• Identify recurring issues and recommend process improvements.

Skills

Security operations

Identity & access mgmt

Policy drafting

Technical writing

Client communication

Job description

Skip to content

Security Analyst

Job Description

Company Overview

Pixel Health bridges healthcare and technology by helping clinical and IT teams improve communication, strengthen IT workflows, and keep healthcare workers focused on patient care.

We look for people who solve problems creatively, act with integrity, collaborate well, and are eager to learn.

Pixel Health supports employee growth through meaningful work, team support, and opportunities to build new skills.

Title

Security Analyst

Location

Remote

Position Summary

The Security Analyst is responsible for the day-to-day operation of security monitoring, identity governance support, and compliance support. The role investigates and resolves security events, advises on access and authentication standards, and prepares and maintains the documentation and evidence that demonstrate compliance with regulatory and client requirements. The position serves as the first point of contact for routine security matters.

Essential Duties and Responsibilities

Security Operations

• Monitor, triage, and investigate security events across endpoint, email, and managed detection and response sources.
• Contain and remediate security events using approved procedures, and upscale incidents that exceed defined thresholds.
• Perform identity containment actions, such as account lockout, session revocation, and authentication reset.
• Respond to reported phishing and suspicious activity.
• Coordinate vulnerability management activities, including prioritization, remediation tracking, and status reporting.
• Document incidents and prepare summaries for management review.
• Conduct periodic access reviews and report exceptions.
• Review privileged access, application control, and credential management requests against established policy, and elevate exceptions.

Governance, Risk, and Compliance

• Draft and revise policies, procedures, and supporting standards for management review and approval.
• Maintain the policy and procedure library, including versioning and the annual review cycle.
• Prepare client-ready documentation and supporting materials for management to present.
• Participate in risk assessments and audits by gathering evidence, performing control checks against defined criteria, and documenting observations. Ratings and conclusions are determined by management.
• Prepare responses to client security questionnaires and due diligence requests from approved content, and route new or non-standard questions for review.
• Administer the security awareness program, including assignment, completion tracking, and follow-up.
• Join client discussions in a supporting role as directed by management.

Operational Support and Documentation

• Manage security work through the ticketing system, maintaining accurate records, priorities, and service levels.
• Develop and maintain runbooks, procedures, and knowledge base content for recurring security inquiries.
• Identify recurring issues and recommend process improvements.

Qualifications

Required

• 3 to 5 years of experience in information security, security operations, or IT support with security responsibilities.
• Experience investigating security events across endpoint, email, or identity sources.
• Working knowledge of identity and access management concepts, including multi-factor authentication, conditional access, and least privilege.
• Familiarity with the HIPAA Security Rule and additional frameworks, such as NIST CSF, CIS Controls, or PCI DSS.
• Demonstrated ability to write clear policies, procedures, and technical documentation.
• Strong written and verbal communication, including client-facing summaries.
• Ability to work independently, prioritize competing demands, and exercise sound judgment on escalation.

Preferred

• Security+ or equivalent certification.
• Experience in a managed services or healthcare environment.
• Scripting experience for reporting and automation.
• Experience completing cyber insurance or vendor security questionnaires.

Working Conditions

This is a remote position with standard business hours. The employee must be available for after-hours escalation of critical security incidents and must handle confidential and regulated information in line with HIPAA requirements.

Benefits

• Competitive Salary
• Flexible Hours
• PTO
• Paid Health, Dental and Vision Insurance
• Matching 401k Plan
• Great team-oriented work environment

Salary

$105,300.00 per year