Senior Security Analyst

At LUX Infusion, we’re reimagining infusion care to be more human, supportive, and connected. Inspired by lux—meaning light - we guide patients, providers, and partners through complex therapies with clarity, compassion, and confidence.

As a clinician-led, U.S.

-based organization, we put people first - helping patients feel seen and supported through faster therapy starts, dedicated care coordination, and meaningful collaboration. Our commitment to inclusion, diversity, equity, and advancement (IDEA) is central to our culture, ensuring every team member feels valued and empowered to make a difference.

At LUX Infusion
, we’re reimagining infusion care as something more human, more supportive, and more connected. We lead with compassion and clarity - helping patients feel confident in moments that matter, while giving providers and partners the trust and insight they need to deliver better outcomes.

We’re looking for a Senior Security Analyst who wants their work to mean something - someone who brings care, accountability, and purpose to what they do every day.

Job Summary

The Senior Security Analyst (Healthcare) is responsible for protecting the organization’s information

systems, data, and technology assets with a primary focus on safeguarding Protected Health

Information (PHI) and ensuring compliance with healthcare regulatory requirements. This role plays a

critical part in designing, implementing, monitoring, and improving the organization’s cybersecurity

posture in alignment with HIPAA, HITECH, and other applicable standards.

This position serves as a senior technical and operational resource within the security function, leading

security monitoring, incident response, risk assessments, vulnerability management, and compliance

initiatives. The Senior Security Analyst works closely with IT, infrastructure, application teams,

compliance, and external partners to identify risks, respond to threats, and maintain a strong security

posture across a multi-site healthcare environment.

Responsibilities include:

Security Operations and Monitoring

Monitor and analyze security events and alerts across networks, endpoints, cloud platforms,

and applications.

Investigate suspicious activity and lead incident response efforts, including triage, containment,

eradication, and recovery.

Serve as an escalation point for complex security incidents and coordinate cross-functional

Maintain and tune SIEM, EDR, and other security tools to improve detection and reduce false

positives.

Conduct root cause analysis and document incidents, actions taken, and lessons learned.

Healthcare Security and Compliance

Ensure compliance with HIPAA, HITECH, and other healthcare regulatory and privacy

requirements.

Participate in security risk assessments, gap analyses, and audits (internal and external),

including support for third-party assessments.

Develop and maintain security policies, standards, and procedures aligned with regulatory

Monitor controls related to PHI protection, data access, and breach prevention.

Support audit readiness and remediation activities for compliance findings.

Vulnerability and Risk Management

Conduct regular vulnerability scans and coordinate remediation efforts across infrastructure and application teams.

Prioritize risks based on business impact, exploitability, and regulatory exposure.

Track and report on vulnerability remediation status and risk reduction efforts.

Perform risk assessments on new systems, vendors, and technology implementations.

Contribute to third-party risk management and vendor security reviews.

Security Engineering and Architecture Support

Collaborate with infrastructure and application teams to implement secure configurations and controls.

Evaluate and recommend security solutions, tools, and technologies to enhance protection capabilities.

Support secure design reviews for new applications, systems, and integrations.

Validate implementation of security controls across networks, endpoints, and cloud environments.

Identity and Access Management (IAM
)

Review and monitor user access to systems containing PHI and sensitive data.

Support access governance…