Cyber Security Analyst

Senior Security Analyst

Location: Columbia, TN (Onsite)
Schedule: Full-Time, Monday–Friday (7am–4pm or 8am–5pm)
Type: 6-Month Contract-to-Hire
Compensation: $50.25/hr (W2)
Start Date: ASAP

If you've ever wanted the opportunity to build something instead of inheriting a mature security program, this could be that role.

We're looking for a Senior Security Analyst to become the organization's first dedicated cybersecurity hire. You'll work directly with IT leadership, help shape security strategy, and serve as the primary security resource across the business.

This is a hands‑on position that combines security operations, vulnerability management, incident response, compliance, and security program development. You'll have visibility with leadership and the chance to influence how security evolves as the company continues to grow.

• Own day-to-day security operations and help mature the overall cybersecurity program
• Manage and optimize security tools including EDR, vulnerability management, SIEM, and application control platforms
• Lead vulnerability identification, prioritization, remediation tracking, and reporting
• Respond to security incidents and coordinate investigations with internal teams and external partners
• Serve as the primary point of contact for the organization's managed security provider
• Support HIPAA Security Rule compliance activities and security risk assessments
• Maintain security documentation, policies, standards, and procedures
• Partner with infrastructure and leadership teams to evaluate and communicate risk
• Provide security guidance for projects, new technologies, and system implementations
• Help mentor infrastructure team members and promote security best practices throughout the organization

• 5+ years of experience in cybersecurity, security operations, or a related security-focused role
• Experience working with EDR solutions (Sentinel One preferred)
• Experience with vulnerability management platforms (Tenable preferred)
• Experience investigating alerts and working with SIEM solutions
• Familiarity with application control or zero-trust technologies such as Threat Locker
• Understanding of security risk assessments, vulnerability remediation, and security governance
• Ability to explain technical risk to both technical and non-technical audiences
• Strong troubleshooting, documentation, and communication skills

This environment operates within healthcare, so experience supporting HIPAA-regulated organizations is highly valued.

Experience with any of the following is especially helpful:

• HIPAA Security Rule
• Security Risk Assessments
• Audit preparation and documentation
• Risk management and remediation planning
• NIST Cybersecurity Framework
• CIS Controls

• Penetration testing experience
• Sentinel One
• Tenable
• Threat Locker
• Azure security and Entra
• Know Be4
• Power Shell, Python, or automation experience
• CISSP, CySA+, GCIH, CEH, OSCP, or similar certifications