Senior Security Analyst

Marathon-Health; Pearl City (HI); On-site; USD 100,000 - 125,000; Full time

Benefits offered by this job

Health benefits

401k match

Paid time off

Job summary

Marathon Health is a leading advanced primary care provider partnering with employer plan sponsors to improve health for millions of Americans. The Senior Security Analyst will lead cross-functional projects to implement key security initiatives and automation, working closely with the CISO to drive security maturity.

Responsibilities include HITRUST, SOC2, PCI DSS assessments, and security training programs.

Qualifications

• Bachelor's degree in computer science, IT, cybersecurity or related field with 5–7 years in IT/security roles.
• Security certifications such as Sec+, CEH, CASP or CISSP are highly desirable.
• Experience automating security tasks and incident response processes.

Responsibilities

• Automate common security tasks and incident response playbooks.
• Respond to customer security assessments and audit requests.
• Provide security leadership across the business and drive security program maturity.

Skills

Automation scripting

Security monitoring

Incident response

Cloud security

Windows administration

HIPAA/NIST knowledge

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Defender

Cisco Meraki

Dell laptops

AWS

Salesforce

Microsoft 365

Job description

Marathon Health is a leading advanced primary care provider, partnering with employer and union plan sponsors to improve health for millions of Americans. With nationwide onsite, nearsite, and network health centers, and virtual primary care, Marathon delivers a value-based model that enhances the healthcare experience for members and providers, while driving meaningful cost savings for plan sponsors. Marathon is proud to be certified as a Great Place to Work, reflecting the company's commitment to building an inclusive, high-trust culture where all employees can thrive. Learn more at marathon.healthABOUT THE JOBThe Senior Security Analyst leads cross functional projects to implement key security initiatives. The individual in this role will lead efforts to identify, design and implement automation across company systems and processes and will work closely with CISO to drive security initiatives and security program maturity.ESSENTIAL DUTIES & RESPONSIBILITIESAutomate common security task.Respond to Customer security assessments and audit requests.Provide security leadership across business in support of company key initiatives.Evaluate security vendors and drive optimization of security tools and services.Lead HITRUST, SOC2, PCI DSS assessment, remediation, documentation, and certification activities.Assist in design and execution of security related training programs and communications.Lead projects to optimize security configurations and management of laptops and other devices.Investigate, document, and remedy security incidents.Automate Incident Response playbooks and IT Security Procedures.Regularly introduce emerging technologies and services that can help Marathon maintain its competitive technical advantage.Experience with Securing Software Development including security of Github, code scanning, and AI code development.QUALIFICATIONSBachelor’s degree in computer science, Information Technology, Cybersecurity, Data Science or a related field and 5-7 years combined experience in broader IT and Security roles. Security certifications related to job responsibilities are highly desirable (e.g. Sec+, CEH, CASP, CISSP).DESIRED ATTRIBUTESExperience creating automation using PowerShell or similar.Hands on experience with security event triage, Windows OS, networking, SIEM, Incident Response, Server and endpoint hardening, application security best practices.Specific experience with Microsoft Defender, Cisco, Meraki, Dell laptops, AWS, Salesforce, Microsoft 365, Smartsheet, and PowerShell is highly desired.Working knowledge of privacy and security standards (e.g., HIPAA, HITRUST, NIST).Proven track record in developing and implementing security policies and procedures.Exceptional written and verbal communication skills, with the ability to engage and collaborate across all levels of the organization. Demonstrated capacity to translate technical security concepts into clear, non-technical language for diverse audiences.Data driven with the ability to take abstract security concepts and establish measurable objectives.Proven project management skills, with the ability to apply these skills to security initiatives, ensuring smooth execution and timely completion.Collaborative mindset, with the ability to work effectively across diverse teams and stakeholders, fostering strong relationships and alignment.Proficiency with Microsoft Office tools, particularly strong expertise in Excel, for data analysis, reporting, and compliance.Experience with Securing Software Development including security of Github, code scanning, and AI code development.Pay Range: $100,000 - $125,000/yrThe actual offer may vary dependent upon geographic location and the candidate’s years of experience and/or skill level.We are accepting applications for this position until a candidate has been selected. To apply to this position and learn more about open jobs at Marathon Health, visit our careers page.Marathon Benefits SummaryWe believe in empowering teammates to do their best work and build better healthcare. Below are some of our benefit offerings. Eligibility is based on 24/hr week.Health and Well-Being: Free Marathon membership for in person and virtual care, employer paid life and disability insurance, and choice in medical/dental plans, vision, employer funded HSA, FSA, and voluntary illness, accident and hospitalization plans. Benefits are effective on the first of the month following date of hire.Financial Support: Competitive compensation, 401k match, access to financial coaching through our Employee Assistance ProgramLifestyle: Paid time off for vacation, sick leave, and more, holiday schedule