Security Operations Analyst: SIEM & Incident Response

Mercyhealth Wisconsin and Illinois; Freeport (IL); On-site; USD 79,000 - 123,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life & Disability Insurance

FSA/HSA Options

Paid time off

Tuition and certification reimburse

Job summary

Mercyhealth is seeking an information security professional to champion security processes across the enterprise, triage alerts from MDR, CRI, and XDR, and monitor systems to identify risk. You will investigate incidents, evaluate notices, and develop metrics to measure program effectiveness.

The role includes supporting regulatory audits and vendor risk assessments. Collaborating with teams, you will ensure policies are followed and align security requirements with Mercyhealth’s standards.

Qualifications

• Associates degree required with a minimum of two years in IT operations or IT security.
• Certifications such as CompTIA Security+ preferred.
• 1+ years of experience in settings like ISO 27001, SOX, HIPAA/HITECH, CLIA, CAP desirable.
• Knowledge of common security exploits, vulnerabilities, and countermeasures.
• Authorization to work in the United States without sponsorship.

Responsibilities

• Serve as a champion for effective information security processes and behaviors across the enterprise.
• Triage information security alerts generated throughout the solution stack (MDR, CRI, XDR).
• Monitor Mercyhealth information security posture using malware detection, spyware/adware detection, and spam filtering systems.
• Investigate incidents and create accurate incident reports; escalate as needed.
• Evaluate security notices issued by vendors and authorities; recommend precaution steps and track remediation.
• Develop, maintain, and communicate metrics to measure information security program effectiveness.
• Represent information security in departmental meetings to inform and train on security topics.
• Assist in fulfilling evidence requests for regulatory audits (SOC, HIPAA/HITECH).
• Evaluate systems/architectures for alignment with Mercyhealth security requirements.
• Conduct regular audits of information systems for policy compliance and improvements.
• Assess third‑party vendor security posture.

Skills

SIEM experience

Cloud security

Incident response

Regulatory compliance

Threat analytics

Communication

Education

Associates degree in IT

Certifications preferred

Tools

SIEM

Job description

Mercyhealth is seeking an information security professional to champion security processes across the enterprise, triage alerts from MDR, CRI, and XDR, and monitor systems to identify risk. You will investigate incidents, evaluate notices, and develop metrics to measure program effectiveness.

The role includes supporting regulatory audits and vendor risk assessments. Collaborating with teams, you will ensure policies are followed and align security requirements with Mercyhealth’s standards.