Security Incident Response Analyst

MissionStaff; New York (NY); On-site; USD 70,000 - 110,000; Full time

Job summary

MissionStaff, LLC is seeking a Security Incident Response Analyst to join a security team protecting clinical cloud environments and sensitive data. You will serve as a liaison among information security, quality management, and production support, guiding incident response from detection through remediation.

You will investigate alerts, assess vulnerabilities, and ensure hosting environments comply with ISO, NIST, HIPAA, and PCI DSS.

Qualifications

• Experience in information security incident response
• Foundational understanding of cloud infrastructure and cloud-specific threats
• Foundational understanding of computer forensics
• Knowledge of evidence custodianship practices
• Ability to log, assess, investigate, and track security events and alerts
• Ability to develop remediation recommendations and risk acceptance plans
• Experience coordinating vulnerability remediation across teams
• Strong documentation and process development skills
• Operationalize information security practices per ISO, NIST, HIPAA, PCI DSS
• Experience writing automation scripts and designing automation workflows
• Strong verbal and written communication skills
• Ability to analyze complex problems and advance security programs

Responsibilities

• Provide primary support throughout the security incident lifecycle
• Investigate alerts and potential breaches
• Assess vulnerabilities and threat advisories
• Help ensure hosting environments comply with industry standards and security policies
• Contribute to security engineering and process improvements
• Support digital forensics, incident response, and cyber threat intelligence programs

Skills

Incident response process

Cloud infrastructure

Forensics basics

Evidence custodianship

Log and investigate events

Remediation planning

Vulnerability remediation coordination

Documentation & process development

ISO/NIST/HIPAA/PCI DSS compliance

Automation scripting

Communication skills

Creative problem solving

Education

Bachelor’s degree or equivalent

Tools

Security monitoring tools

PKI / certificates management

Automation tooling

Job description

We connect top talent in Business Services, Tech, Marketing & Creative with companies of all sizes—offering flexible, high-touch staffing solutions. We are currently filling the following contract job for our client.

Security Incident Response Analyst

Overview

Join a security team focused on protecting clinical cloud environments and sensitive data from evolving threats. As an Information Security Incident Response Analyst, you will serve as a key liaison among information security, quality management, and production support teams. You will provide primary support throughout the security incident lifecycle, investigate alerts and potential breaches, assess vulnerabilities and threat advisories, and help ensure hosting environments comply with industry standards and organizational security policies. This role also contributes to security engineering, process improvement, and the advancement of digital forensics, incident response, and cyber threat intelligence programs.

Required Skills

• Experience with the information security incident response process
• Solid understanding of cloud infrastructure and cloud-specific threats
• Foundational understanding of computer forensics
• Working knowledge of evidence custodianship
• Ability to log, assess, investigate, and track information security events and alerts
• Ability to develop remediation recommendations and risk acceptance plans
• Experience coordinating vulnerability remediation across multiple teams
• Strong documentation and process development skills
• Ability to operationalize information security practices aligned with ISO, NIST, HIPPA, and PCI DSS
• Experience writing automation scripts and designing automation workflows
• Strong oral and written communication skills
• Ability to analyze complex problems creatively and apply knowledge to advance security programs

Nice to Have Skills

• AWS experience
• ECIH or GCIH certification
• Experience with security monitoring tools and third-party security services
• Experience with security keys, certificates, and PKI infrastructure
• Experience supporting security controls for computer systems, networks, and information systems

Preferred Education and Experience

• Bachelor’s degree or equivalent experience
• Experience in information security incident response, vulnerability management, cloud security, or a related area
• Security certification desired; a security certification will be required within one year of hire

Other Requirements

• Ability to participate in an on-call rotation and work outside normal business hours
• Ability to clear a background check suitable for working in a FedRAMP-regulated environment
• Ability to maintain accurate audit records of access and changes to security assets
• Ability to maintain security key and certificate inventories and manage rotationsAbility to assess production-system impacts and prepare security impact reports

MissionStaff is an equal opportunity employer. Please note that we do not accept unsolicited resumes from third-party recruiters or agencies. Additionally, candidates must be U.S. citizens or Permanent Residents to be considered for this position.