Security Analyst (IR) - Incident Response & Threat Hunting

Aveanna Healthcare; Atlanta (GA); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Comprehensive benefits

401(k) matching

Job summary

Aveanna Healthcare is seeking a Security Analyst (IR) to support daily Incident Response operations, monitor alerts, and assist in investigations. You will tune detection systems, participate in purple team exercises, and contribute to refining IR playbooks and response procedures.

Requirements include 2–4 years in information security, incident response tooling experience, and strong reporting skills. Collaboration with compliance and IT teams is essential for success.

Qualifications

• 2–4 years in Information Security or equivalent.
• Experience monitoring for and responding to security events.
• Experience with incident response tools, TTPs, and playbooks.
• Ability to write incident response reports and leadership communications.
• Experience creating and executing IR runs and playbooks.
• Familiarity with EDR and AV solutions.
• Scripting knowledge in PowerShell, Python, Bash, or Ruby.
• Industry certifications (e.g., CompTIA Security+) are a plus.

Responsibilities

• Monitor and analyze security alerts from SIEM, EDR, and network tools.
• Triage incidents and escalate per procedures.
• Assist in incident investigations and evidence collection.
• Tune detection systems to reduce false positives and improve visibility.
• Participate in threat hunting and purple team exercises.
• Document findings, root cause analyses, and lessons learned.
• Support IR playbook development and process improvements.
• Collaborate with Infrastructure, End User Computing, Compliance, and Risk teams.

Skills

Incident response

Monitoring security events

Communication

Playbooks & runbooks

Programming/scripting

EDR/AV usage

Threat hunting

Report writing

Tools

SIEM

EDR

IDS/IPS

Forensic tools

PowerShell

Python

Job description

Aveanna Healthcare is seeking a Security Analyst (IR) to support daily Incident Response operations, monitor alerts, and assist in investigations. You will tune detection systems, participate in purple team exercises, and contribute to refining IR playbooks and response procedures.

Requirements include 2–4 years in information security, incident response tooling experience, and strong reporting skills. Collaboration with compliance and IT teams is essential for success.