← All roles

Senior Security Analyst

Apply on company site
RemoteFull-timePosted 3w ago

About the role

Senior Security Analyst to strengthen security operations, threat detection, and risk management at Abby Care, a healthcare-focused AI-native platform. Remote-friendly full-time role based in the United States with PST hours. Leads incident response, vulnerability management, and security monitoring across cloud, endpoint, and identity infrastructure; mentors junior analysts and drives continuous security improvements.

Responsibilities

  • Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR (SentinelOne), and cloud security tooling.
  • Develop and maintain incident response playbooks, runbooks, and tabletop exercises.
  • Own the vulnerability management lifecycle, partnering with IT and Engineering to remediate scan, pen test, and audit findings.
  • Maintain the risk register, conduct third-party/vendor risk assessments, and communicate technical risks to business stakeholders.
  • Partner with IT to audit and enforce security controls across Okta (RBAC/MFA), Google Workspace (DLP/logs), JAMF, and SentinelOne.
  • Drive evidence collection and remediation for compliance audits (SOC 2, ISO 27001, HIPAA, PCI DSS) while aligning policies with NIST CSF and CIS frameworks.
  • Automate detection, response, and reporting workflows via SOAR, scripting, and APIs to improve alert quality and efficiency.
  • Mentor team members and contribute to cross-functional security knowledge sharing.
  • Establish guardrails and acceptable-use policies for enterprise AI tools (e.g., GenAI, Claude), mitigating shadow AI, data leakage, and third-party vendor risks alongside IT, Legal, and Compliance.
  • Partner with Product and Engineering to assess and remediate AI/LLM-specific vulnerabilities, including prompt injection, model abuse, and data exposure.
  • Pilot and evaluate AI-powered security capabilities (e.g., AI-assisted SIEM/EDR triage and anomaly detection) to boost response speed and operational efficiency.

Qualifications

  • 8+ years of experience in security operations, leading incident response end-to-end from detection through remediation.
  • Associate’s or Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience.
  • Prior experience in healthcare or health tech with HIPAA data privacy understanding.
  • Hands-on experience with SIEMs, EDR/XDR (e.g., SentinelOne), vulnerability scanners, cloud security, and core IAM concepts (SSO, MFA, RBAC).
  • Working knowledge of security frameworks (SOC 2, ISO 27001, NIST, CIS) with ability to translate technical risk to business stakeholders.
  • Familiarity with emerging AI/LLM risks and evaluating AI capabilities for security use cases.
  • Excellent communication skills, ability to prioritize incidents and operate under pressure.

Skills

Required:Incident responseVulnerability managementCompliance & frameworksIdentity & access management

Benefits

  • Competitive compensation packages that reflect impact.
  • Comprehensive health coverage (medical, dental, vision) including $0 deductible PPO and company-funded HSA, plus employer-paid life and disability insurance.
  • Generous paid time off and 10 paid company holidays.
  • Financial savings benefits (HSA contributions, optional FSA and commuter benefits, full coverage of 401(k) account fees).
  • Paid parental leave up to 10 weeks (based on tenure).
Last updated Oct 14, 2026. Interested? Apply on the company site.

About Abby Care

Get paid for family caregiving

We help you get compensated by Medicaid for taking care of your child with disabilities or special needs.

Medicaidfamily caregivingdisabilitiesspecial needs

More open roles at Abby Care