Senior Security Analyst - MDR & Incident Response Lead

HCA Healthcare; Louisville (KY); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical benefits

401(k) Match

Tuition assistance

Paid time off

Job summary

HCA Healthcare is seeking a Senior Security Analyst to support the Information Protection & Security (IPS) program. You will monitor alerts, lead incident response, and coordinate with MDR providers, IT, and business stakeholders to protect patient data and reduce risk.

The role emphasizes operational execution, documentation, and collaboration with cross-functional teams to strengthen IPS controls and drive timely remediation of security events.

Qualifications

• Bachelor's degree or higher in a relevant field with 3+ years of experience, or equivalent experience.
• Experience in cybersecurity operations, DFIR, and risk management in healthcare IT preferred.
• Knowledge of security controls, incident response, and regulatory considerations (HIPAA, PCI) desired.

Responsibilities

• Monitor and triage security alerts from MDR and security tools.
• Coordinate incident response activities with MDR provider, IT, and business stakeholders.
• Support DFIR activities, threat analysis, and security tool health across the IPS program.
• Lead containment actions, ticket review, and closure per procedures.
• Improve documentation, metrics, and lessons learned from security events.
• Collaborate with vendors and field teams to address vulnerabilities and control gaps.

Skills

Cybersecurity operations

Incident response

Threat intelligence

Risk management

DFIR

Security incident handling

Education

Bachelor's degree in information security

Tools

M365 security tools

SIEM

EDR

MDR

Job description

HCA Healthcare is seeking a Senior Security Analyst to support the Information Protection & Security (IPS) program. You will monitor alerts, lead incident response, and coordinate with MDR providers, IT, and business stakeholders to protect patient data and reduce risk.

The role emphasizes operational execution, documentation, and collaboration with cross-functional teams to strengthen IPS controls and drive timely remediation of security events.