Cybersecurity Operations Analyst

JOB SUMMARY: The Cybersecurity Operations Analyst is responsible for supporting and advancing THINK Surgical's cybersecurity program through a combination of security operations, incident response, vulnerability management, cybersecurity projects, compliance activities, AI governance initiatives, and data governance programs.

This role serves as a key contributor to the organization's overall cybersecurity and information protection strategy, helping secure systems, cloud services, endpoints, data, and emerging technologies while continuously improving cybersecurity maturity across the organization.

Approximately 60% of the role is focused on cybersecurity operations, vulnerability management, incident response, compliance support, and security administration. Approximately 40% of the role is focused on cybersecurity projects, AI governance, data governance initiatives, and continuous security improvement efforts.

The successful candidate will investigate security events, coordinate remediation efforts, support data protection initiatives, contribute to AI governance activities, and lead security improvement projects in collaboration with IT, Engineering, Quality, Compliance, and business stakeholders. This position is based at THINK’s corporate office.

DUTIES & RESPONSIBILITIES Security Operations & Incident Response Monitor, triage, investigate, and respond to security alerts generated from MDR, SIEM, endpoint protection, cloud security, and identity security platforms.

Conduct incident investigations, collect forensic evidence, analyze root causes, and document findings in accordance with established procedures.

Coordinate containment, remediation, recovery, and communication activities related to cybersecurity incidents.

Develop recommendations to improve security controls, monitoring capabilities, and response procedures based on incident findings.

Assist with proactive threat hunting and security investigations.

Maintain incident response documentation, playbooks, procedures, and lessons learned.

Vulnerability Management Own the vulnerability management lifecycle including identification, prioritization, remediation tracking, validation, risk acceptance, and reporting.

Coordinate with IT, Engineering, and system owners to ensure timely remediation of identified vulnerabilities.

Facilitate vulnerability review meetings and track remediation performance against established targets.

Analyze vulnerability trends and provide risk-based recommendations to management.

Assist with implementation of security hardening recommendations across endpoints, servers, cloud services, applications, and network infrastructure.

Security Projects & Continuous Improvement Coordinate cybersecurity projects from planning through implementation and operational transition.

Develop project plans, timelines, status reports, risk registers, and implementation documentation.

Support deployment and optimization of security technologies including identity management, endpoint security, email security, vulnerability management, monitoring, and cloud security solutions.

Participate in evaluation, testing, and implementation of new cybersecurity technologies and controls.

Coordinate activities with third-party vendors, consultants, and service providers supporting cybersecurity initiatives.

Identify opportunities to improve security controls, operational processes, automation, and overall cybersecurity maturity.

Support strategic cybersecurity roadmap initiatives and continuous improvement programs.

Identity & Access Management Support enterprise identity and access management processes including user provisioning, access reviews, privileged access management, conditional access, and authentication controls.

Assist with monitoring,…