Principal Cyber Security Analyst

Position Summary

We are seeking a Principal Cyber Security Analyst to serve as a senior technical authority protecting our healthcare and claims environments. You will lead threat detection, incident response, risk assessment, and security architecture review for systems that handle protected health information (PHI), personally identifiable information (PII), and payment data. This role partners with Engineering, Claims Operations, Compliance, and Legal to keep sensitive data secure and regulatory obligations met, and it mentors analysts across the security organization.

Key Responsibilities

Threat Detection & Incident Response

• Lead investigation and response for complex security incidents, including ransomware, business email compromise, insider threats, and suspected PHI breaches
• Develop and tune detection use cases, correlation rules, and playbooks in SIEM, EDR, and SOAR platforms
• Conduct threat hunting and threat intelligence analysis, with emphasis on healthcare-targeted threat actors
• Direct breach assessment and coordinate notification activities with Privacy, Legal, and Compliance under HIPAA and state breach laws
• Perform post-incident reviews and drive remediation of root causes

Risk, Compliance & Governance

• Perform and oversee security risk assessments aligned to HIPAA Security Rule, HITRUST CSF, NIST CSF, NIST 800-53, and SOC 2
• Support internal and external audits, client security questionnaires, and payer/provider due diligence
• Assess third-party and vendor risk, including clearinghouses, TPAs, cloud providers, and business associates
• Maintain risk registers and report risk posture to senior leadership

Security Architecture & Engineering Partnership

• Review architecture and design for claims adjudication, EDI (837/835), eligibility, provider portals, and member-facing applications
• Advise on cloud security (AWS, Azure, or GCP), identity and access management, encryption, network segmentation, and data loss prevention
• Embed security into the SDLC, including threat modeling, secure code review, and vulnerability management
• Ensure appropriate controls for data in transit and at rest, including HL7, FHIR, and API-based data exchange

Data Protection & Claims Environment Security

• Safeguard claims data against fraud, unauthorized access, and exfiltration
• Monitor privileged and role-based access to claims platforms, data warehouses, and analytics environments
• Collaborate with Privacy and Compliance on minimum-necessary access, data retention, and de-identification practices

Leadership & Mentorship

• Serve as technical lead and escalation point for Tier 2 and Tier 3 analysts
• Mentor junior and mid-level staff and contribute to training and tabletop exercises
• Communicate complex technical risks clearly to executive and non-technical stakeholders

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or equivalent experience
• 8+ years of progressive information security experience, including 3+ years in healthcare, health insurance, or claims processing
• Hands-on experience with SIEM (Splunk, Sentinel, QRadar), EDR (CrowdStrike, Defender, SentinelOne), and vulnerability management tools
• Deep knowledge of HIPAA/HITECH, PHI handling requirements, and breach response obligations
• Demonstrated experience leading incident response in a regulated environment
• Working knowledge of cloud security, IAM, network security, and encryption
• Familiarity with healthcare data standards and workflows (EDI X12, HL7, FHIR) and claims lifecycle processes
• Strong written and verbal communication skills

Preferred Qualifications

• Certifications: CISSP, CISM, CCSP, GCIH, GCIA, GCFA, HCISPP, or CISA
• Experience with HITRUST, SOC 2, or PCI DSS assessments
• Experience with payer, TPA, PBM, or healthcare clearinghouse environments
• Familiarity with MITRE ATT&CK, Zero Trust, and scripting for automation (Python, PowerShell)
• Knowledge of healthcare fraud, waste, and abuse (FWA) patterns and related data analytics
• Experience with medical device or IoMT security

Core Competencies

• Analytical and investigative rigor under pressure
• Risk-based decision making and sound judgment
• Cross-functional collaboration and influence without authority
• Ethical handling of sensitive and confidential information
• Continuous learning in a rapidly evolving threat landscape

Salary Range

Now, a little about us …

At Tegria, we bring bold ideas and breakthroughs to improve care, technology, revenue, and operations in ways that move healthcare organizations from patient-centered to human-centered. We are helping healthcare put people first—both patients and those who dedicate their lives to delivering care.

And at the very core of this vital work is our incredibly talented people.

People with different backgrounds who welcome challenge and change. People who listen first, ask hard questions, and make decisions to cultivate a culture of equity and inclusion. People who chase after goals, growth, and generosity. We’re real. We’re nimble, and we believe in our mission to humanize healthcare.

Perks and benefits

Top talent deserves top rewards. We’ve carefully curated a best-in-class benefits package, meant to meet you wherever you are in your life and career.

• Your health, holistically. We offer a choice of multiple health and dental plans with nationally recognized networks, as well as vision benefits, a total wellness program, and an employee assistance program for you and your family.
   

• Your financial well-being. We offer competitive wages, retirement savings plans, company-paid disability and life insurance, pre-tax savings opportunities (HSA and/or FSA), and more.
   

• And everything in between. Our lifestyle benefits are unrivaled, including professional development offerings, opportunities for remote work, and our favorite: a generous paid-time-off program, giving you the flexibility to plan a vacation, take time away for illness (or life’s important events), and shift your schedule to accommodate those unexpected curve balls thrown your way.
   

Tegria is an equal employment opportunity employer and provides equal employment opportunities (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. All qualified candidates are encouraged to apply.