Senior IT Security Operations Analyst

Children's Hospital Colorado; Aurora (CO); Hybrid; USD 105,000 - 158,000; Full time

Job summary

Children's Hospital Colorado is seeking an IT Security Analyst to strengthen threat detection, investigation, and response capabilities in a hybrid Aurora, CO environment. The role focuses on cloud-based security technologies, security operations, and risk management across enterprise systems.

Ideal candidates will have hands-on security operations experience, strong knowledge of NIST/Zero Trust frameworks, and the ability to mentor teammates while driving continuous improvement in the

Qualifications

• Bachelor's degree required.
• Minimum of five (5) years of related experience required.
• Nine (9) years may be considered in lieu of minimum requirements.

Responsibilities

• Conducts vulnerability assessments and identifies security risks.
• Develops and enforces security policies and procedures.
• Performs security assessments and reviews networking initiatives for compliance.
• Recommends security products for various platforms.
• Responds to alerts and investigates security incidents.
• Educates users on security requirements and procedures.
• Plans and implements security system enhancements.
• Researches security trends and evaluates products and procedures.
• Ensures regulatory compliance and privacy laws.
• Manages security profiles and investigates violations.
• Documents security controls and provides risk analyses to management.
• Reviews firewall rules and monitors network security measures.
• Prepares status reports and develops incident response procedures.

Skills

Security Operations

Threat Intelligence

Cloud security

Incident response

Firewall management

Education

Bachelor's degree

Tools

Cloud service tools

Job description

LocationAurora

Position TypeRegular

Regular/TemporaryRegular

This position is responsible for performing advanced, complex work related to the assessment, planning, design, implementation, enforcement, and auditing of information security policies, standards, and procedures. The role safeguards the integrity, confidentiality, and availability of enterprise systems, applications, files, and data. Key responsibilities include developing, monitoring, evaluating, maintaining, and enforcing security controls, processes, and technologies. This position may also provide technical leadership and guidance to lower-level staff.

We are seeking an experienced IT Security Analyst to join our team and help strengthen our threat detection, investigation, and response capabilities. The ideal candidate will have hands-on experience with cloud-based security technologies, including the implementation, configuration, and optimization of platforms that support security operations in a complex healthcare environment.

This role requires a strong background in Security Operations and Threat Intelligence, with demonstrated expertise in identifying, analyzing, investigating, and responding to evolving cybersecurity threats. The successful candidate will actively engage with the cybersecurity community to stay informed on emerging threats, industry trends, and best practices.

In addition, this individual will serve as a trusted technical resource and mentor to team members by sharing knowledge, fostering professional growth, and promoting a culture of collaboration, continuous learning, and operational excellence. Through their leadership and expertise, they will help advance and strengthen the cybersecurity program at Children's Hospital Colorado.

Additional Information

Hours per week: 40, eligible for benefits Shift: Monday - Friday, 8am-5pm, work hours may vary due to department needs. This position does have on-call requirements.

• This is a hybrid position, with some onsite expectations. This does require you to live in the state of Colorado.

Duties & Responsibilities

• Conducts complex vulnerability assessments and identifies potential systems and process vulnerabilities. Determines security infrastructure requirements.
• Develops and implements security policies, procedures and measures to prevent unauthorized access. Audits security policies and procedures and identifies potential areas where existing data security policies and procedures require change.
• Performs complex security assessments and reviews networking initiatives for security compliance.
• Evaluates and recommends security products for various platforms in the networking environment.
• Responds to alerts from information security tools and reports, investigates and resolves security incidents.
• Educates and communicates security requirements, standards and procedures to all users and new employees. Ensures that user community understands and adheres to necessary procedures.
• Recommends, plans, and implements complex security system enhancements.
• Researches security trends, new methods, and techniques. Evaluates and recommends security products, services and procedures .
• Ensures compliance with regulations and privacy laws and enforces security policies and procedures.
• Administers and monitors security profiles, reviews security violation reports and investigates possible security exceptions.
• Creates, updates, maintains and documents security controls.
• Provides guidance and direction on best practices for the protection of information.
• Provides management with risk assessments and security briefings to advise them of critical issues that may affect customers or impact organizational security objectives.
• Responsible for complex firewall rule change review, network monitoring, and other various network security measures.
• Prepares status reports on security matters and develops security risk analysis scenarios and response procedures.

Minimum Qualifications

• EDUCATION - Bachelor's degree is required.
• EXPERIENCE - Minimum of five (5) years of related experience is required.
• EQUIVALENCY - Combination of post-high school education, job related certification, and/or related experience equivalent to nine (9) years may be considered in lieu of minimum requirements.

Preferences:

• Excellent written and verbal communication skills, with the ability to work effectively with technical and non-technical groups.
• Previous experience with cloud service tools strongly preferred.
• Previous healthcare experience is a plus.
• CISSP, GIAC, or SANs certifications preferred
• Previous experience with leading a security operations team (SOC)
• Previous experience with implementing NIST, Zero Trust, and Mitre Attack frameworks
• Previous experience with securing Artificial Intelligence (AI) and Machine Learning (ML) systems

Salary Information

Pay is dependent on applicant's relevant experience.

Annual Salary Range (Based on 40 hours worked per week): $105,046.99 to $157,570.49

Benefits Information

Here, you matter. As a Children's Hospital Colorado team member, you will receive a competitive pay and benefits package designed to take care of your needs that includes base pay, incentives, paid time off, medical/dental/vision insurance, company provided life and disability insurance, paid parental leave, 403b employer match (retirement savings), a robust wellness program, and access to professional development tools, including an education benefit to help you advance your career.

As part of our Total Rewards package, Children's Colorado offers an annual employee bonus program that rewards eligible team members based on organizational performance. If organizational goals are met for the year, the bonus is paid out the following April.

Children's Colorado delivers annual base pay increases to eligible team members based on their performance over the previous year.

EEO Statement

It is our intention that all qualified applicants be given equal opportunity and that selection decisions be based on job-related factors. We do not discriminate on the basis of race, color, religion, national origin, sex, age, disability, or any other status protected by law or regulation. Be aware that none of the questions are intended to imply illegal preferences or discrimination based on non-job-related information. The position is expected to stay open until the posted close date. Please submit your application as soon as possible as the posting is subject to close at any time once a sufficient pool of qualified applicants is obtained.

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of attendance at or graduation from an educational institution. You will not be penalized for redacting or removing this information.

#LI-AE1

Estimated Close Date11/15/2026