Security Operations & Vulnerability Analyst

Gifthealth Inc; Columbus (OH); On-site; USD 70,000 - 100,000; Full time

Job summary

Gifthealth Inc. is seeking an Information Security Analyst to support daily security operations, monitoring alerts from endpoints, identities, emails, and cloud services, and to drive incident response and remediation across IT, engineering, and business teams.

The role emphasizes vulnerability management, detection tuning, and security program improvements, with opportunities to contribute to playbooks, metrics, and audits while working with external vendors and internal stakeholders.

Qualifications

• BA in Computer Science, Cybersecurity, or related field preferred.
• 2–4 years hands-on experience operating and tuning security tools in a live production environment.
• Experience with Windows, macOS, Linux, cloud platforms, or enterprise SaaS environments.

Responsibilities

• Monitor and investigate security alerts across endpoint, identity, email, cloud, and other security technologies.
• Perform initial triage and investigation of suspected security incidents.
• Escalate security events based on severity and incident response procedures.
• Support containment, remediation, recovery, and post-incident activities.
• Maintain records of security investigations, findings, and response actions.
• Develop and maintain security incident response procedures and playbooks.
• Participate in security exercises and tabletop exercises.

Skills

Security monitoring

Incident response

Vulnerability management

Endpoint security

Email security

Cloud platforms

Windows

macOS

Linux

Okta

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

SentinelOne

Tenable

Proofpoint

Okta

Job description

Gifthealth Inc. is seeking an Information Security Analyst to support daily security operations, monitoring alerts from endpoints, identities, emails, and cloud services, and to drive incident response and remediation across IT, engineering, and business teams.

The role emphasizes vulnerability management, detection tuning, and security program improvements, with opportunities to contribute to playbooks, metrics, and audits while working with external vendors and internal stakeholders.