The Security Analyst manages daily security operations, including monitoring, incident investigation, and identity governance. They also support governance, risk, and compliance activities by maintaining policies, preparing documentation for audits, and responding to client security questionnaires.
Security Analyst
Job Description
Company Overview
Pixel Health bridges healthcare and technology by helping clinical and IT teams improve communication, strengthen IT workflows, and keep healthcare workers focused on patient care.
We look for people who solve problems creatively, act with integrity, collaborate well, and are eager to learn. Pixel Health supports employee growth through meaningful work, team support, and opportunities to build new skills.
Title
Security Analyst
Location
Remote
Position Summary
The Security Analyst is responsible for the day-to-day operation of security monitoring, identity governance support, and compliance support. The role investigates and resolves security events, advises on access and authentication standards, and prepares and maintains the documentation and evidence that demonstrate compliance with regulatory and client requirements. The position serves as the first point of contact for routine security matters.
Essential Duties and Responsibilities
Security Operations
Monitor, triage, and investigate security events across endpoint, email, and managed detection and response sources.
Contain and remediate security events using approved procedures, and escalate incidents that exceed defined thresholds.
Perform identity containment actions, such as account lockout, session revocation, and authentication reset.
Respond to reported phishing and suspicious activity.
Coordinate vulnerability management activities, including prioritization, remediation tracking, and status reporting.
Document incidents and prepare summaries for management review.
Conduct periodic access reviews and report exceptions.
Review privileged access, application control, and credential management requests against established policy, and escalate exceptions.
Governance, Risk, and Compliance
Draft and revise policies, procedures, and supporting standards for management review and approval.
Maintain the policy and procedure library, including versioning and the annual review cycle.
Prepare client-ready documentation and supporting materials for management to present.
Participate in risk assessments and audits by gathering evidence, performing control checks against defined criteria, and documenting observations. Ratings and conclusions are determined by management.
Prepare responses to client security questionnaires and due diligence requests from approved content, and route new or non-standard questions for review.
Administer the security awareness program, including assignment, completion tracking, and follow-up.
Join client discussions in a supporting role as directed by management.
Operational Support and Documentation
Manage security work through the ticketing system, maintaining accurate records, priorities, and service levels.
Develop and maintain runbooks, procedures, and knowledge base content for recurring security inquiries.
Identify recurring issues and recommend process improvements.
Qualifications
Required
3 to 5 years of experience in information security, security operations, or IT support with security responsibilities.
Experience investigating security events across endpoint, email, or identity sources.
Working knowledge of identity and access management concepts, including multi-factor authentication, conditional access, and least privilege.
Familiarity with the HIPAA Security Rule and additional frameworks, such as NIST CSF, CIS Controls, or PCI DSS.
Demonstrated ability to write clear policies, procedures, and technical documentation.
Strong written and verbal communication, including client-facing summaries.
Ability to work independently, prioritize competing demands, and exercise sound judgment on escalation.
Preferred
Security+ or equivalent certification.
Experience in a managed services or healthcare environment.
Scripting experience for reporting and automation.
Experience completing cyber insurance or vendor security questionnaires.
Working Conditions
This is a remote position with standard business hours. The employee must be available for after-hours escalation of critical security incidents and must handle confidential and regulated information in line with HIPAA requirements.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”