Security Operations Analyst: Threat Detection & Response

Good Shepherd Health Care System; Hermiston (OR); On-site; USD 104,000 - 197,000; Full time

Job summary

Good Shepherd Health Care System is seeking a Security Operations Specialist to monitor, investigate, and respond to security alerts across on-premises and cloud platforms. You will defend the organization’s information and technology, triage alerts, and coordinate containment with the cyber security team.

The role requires 1–2 years in security operations, familiarity with Microsoft Sentinel and Defender, and experience with MDR tools like GreyMatter. HIPAA-aware environments are a plus.

Qualifications

• Required: High School Diploma or equivalent. Preferred: Bachelor's degree.
• 1-2 years in a security operations or IT security role (Tier 1 or 2).
• Familiarity with SIEM platforms, especially Microsoft Sentinel and endpoint tooling like Defender.
• Experience with security case management tools (e.g., GreyMatter or similar MDR).
• Knowledge of phishing analysis, EDR actions, user access review, and AD structures.

Responsibilities

• Monitor and triage security alerts from platforms like Office 365, Defender, and MDR apps.
• Correlate logs across endpoints, servers, firewalls, proxies, and cloud services to identify threats.
• Investigate events and determine containment or escalation actions.
• Escalate high-impact incidents to senior cyber security team members.
• Document findings and actions in case management systems.
• Collaborate with help desk and IT support to notify impacted users.

Skills

SIEM experience

Microsoft Defender

Incident response

Documentation

Communication

Education

High School Diploma

Bachelor's degree

Tools

GreyMatter

Microsoft Sentinel

Office 365 Defender

Intune

Azure AD

Job description

Good Shepherd Health Care System is seeking a Security Operations Specialist to monitor, investigate, and respond to security alerts across on-premises and cloud platforms. You will defend the organization’s information and technology, triage alerts, and coordinate containment with the cyber security team.

The role requires 1–2 years in security operations, familiarity with Microsoft Sentinel and Defender, and experience with MDR tools like GreyMatter. HIPAA-aware environments are a plus.