Senior Security Analyst

Marathon Health; United States; On-site; USD 100,000 - 125,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid time off

Job summary

Marathon Health is seeking a Senior Security Analyst to lead cross-functional security initiatives, driving automation across systems and processes in collaboration with the CISO. The role focuses on strengthening security program maturity and incident response across the organization.

The ideal candidate will bring 5–7 years in IT/security, a bachelor’s degree, and certifications such as Sec+, CEH, CISSP. Expect hands-on work with Microsoft Defender, SIEM, and secure software development

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, data science or a related field, with 5-7 years in IT/security roles.
• Security certifications related to job responsibilities are highly desirable (e.g. Sec+, CEH, CASP, CISSP).

Responsibilities

• Automate common security tasks.
• Respond to customer security assessments and audit requests.
• Provide security leadership across the business in support of key initiatives.
• Evaluate security vendors and optimize security tools and services.
• Lead HITRUST, SOC2, PCI DSS assessment, remediation, documentation, and certification activities.
• Assist in design and execution of security training programs and communications.
• Lead projects to optimize security configurations and management of laptops and devices.
• Investigate, document, and remedy security incidents.
• Automate Incident Response playbooks and IT Security Procedures.
• Introduce emerging technologies to maintain competitive technical advantage.
• Experience with securing software development including Github security, code scanning, and AI code development.

Skills

Automation using PowerShell

Security event triage

Windows OS

Networking

SIEM

Incident Response

Device hardening

Github security

Code scanning

AI code development

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Microsoft Defender

Cisco

Meraki

Dell laptops

AWS

Salesforce

Microsoft 365

Smartsheet

PowerShell

Github

Code scanning

AI code development

Job description

Marathon Health is a leading advanced primary care provider, partnering with employer and union plan sponsors to improve health for millions of Americans. With nationwide onsite, nearsite, and network health centers, and virtual primary care, Marathon delivers a value-based model that enhances the healthcare experience for members and providers, while driving meaningful cost savings for plan sponsors. Marathon is proud to be certified as a Great Place to Work®, reflecting the company's commitment to building an inclusive, high-trust culture where all employees can thrive. Learn more at marathon.health

About The Job

The Senior Security Analyst leads cross functional projects to implement key security initiatives. The individual in this role will lead efforts to identify, design and implement automation across company systems and processes and will work closely with CISO to drive security initiatives and security program maturity.

Essential Duties & Responsibilities

• Automate common security task.
• Respond to Customer security assessments and audit requests.
• Provide security leadership across business in support of company key initiatives.
• Evaluate security vendors and drive optimization of security tools and services.
• Lead HITRUST, SOC2, PCI DSS assessment, remediation, documentation, and certification activities.
• Assist in design and execution of security related training programs and communications.
• Lead projects to optimize security configurations and management of laptops and other devices.
• Investigate, document, and remedy security incidents.
• Automate Incident Response playbooks and IT Security Procedures.
• Regularly introduce emerging technologies and services that can help Marathon maintain its competitive technical advantage.
• Experience with Securing Software Development including security of Github, code scanning, and AI code development.

Qualifications

Bachelor’s degree in computer science, Information Technology, Cybersecurity, Data Science or a related field and 5-7 years combined experience in broader IT and Security roles. Security certifications related to job responsibilities are highly desirable (e.g. Sec+, CEH, CASP, CISSP).

DESIRED ATTRIBUTES

• Experience creating automation using PowerShell or similar.
• Hands on experience with security event triage, Windows OS, networking, SIEM, Incident Response, Server and endpoint hardening, application security best practices.
• Specific experience with Microsoft Defender, Cisco, Meraki, Dell laptops, AWS, Salesforce, Microsoft 365, Smartsheet, and PowerShell is highly desired.
• Working knowledge of privacy and security standards (e.g., HIPAA, HITRUST, NIST).
• Proven track record in developing and implementing security policies and procedures.
• Exceptional written and verbal communication skills, with the ability to engage and collaborate across all levels of the organization. Demonstrated capacity to translate technical security concepts into clear, non-technical language for diverse audiences.
• Data driven with the ability to take abstract security concepts and establish measurable objectives.
• Proven project management skills, with the ability to apply these skills to security initiatives, ensuring smooth execution and timely completion.
• Collaborative mindset, with the ability to work effectively across diverse teams and stakeholders, fostering strong relationships and alignment.
• Proficiency with Microsoft Office tools, particularly strong expertise in Excel, for data analysis, reporting, and compliance.
• Experience with Securing Software Development including security of Github, code scanning, and AI code development.

Pay Range: $100,000 - $125,000/yr

The actual offer may vary dependent upon geographic location and the candidate’s years of experience and/or skill level.

We are accepting applications for this position until a candidate has been selected.

Marathon Benefits Summary

• Health and Well-Being: Free Marathon membership for in person and virtual care, employer paid life and disability insurance, and choice in medical/dental plans, vision, employer funded HSA, FSA, and voluntary illness, accident and hospitalization plans. Benefits are effective on the first of the month following date of hire.
• Financial Support: Competitive compensation, 401k match, access to financial coaching through our Employee Assistance Program
• Lifestyle: Paid time off for vacation, sick leave, and more, holiday schedule