Cyber Security Specialist

We are seeking a hands-on Cybersecurity Administrator to join a healthcare organization that is actively modernizing and strengthening its cybersecurity program.

This is an opportunity to join a lean security team where you will have direct exposure to security operations, threat detection, incident response, endpoint security, network security, cloud security, and vulnerability management
. You'll work in a hybrid, multi-site environment and help improve the organization's overall security posture.

This role is ideal for someone coming from a SOC, Cybersecurity Analyst, Security Analyst, or Security Administrator background who enjoys investigating real threats rather than simply administering tools.

• Monitor and analyze security alerts, threats, vulnerabilities, and suspicious activity
• Investigate potential security incidents and determine appropriate remediation
• Support incident response, threat detection, vulnerability management, and security monitoring
• Work across endpoint, server, network, identity, and cloud security
• Configure, monitor, and tune cybersecurity tools and security policies
• Help maintain endpoint protection, device compliance, and access controls
• Partner with IT infrastructure and leadership to identify and reduce security risks
• Assist with strengthening security across a hybrid cloud and multi-site network environment
• Participate in the continued development and maturation of the cybersecurity program

Experience with every technology below is not required
, but exposure to several is highly valuable:

• SD-WAN
• Threat Locker / EDR
• Cisco ISE / Network Access Control
• Endpoint and network security
• Security alerting and monitoring platforms

• Hands‑on professional experience in cybersecurity, security operations, or a SOC environment
• Experience monitoring and investigating security alerts and potential threats
• Understanding of incident response, threat detection, vulnerabilities, and security risks
• Strong fundamental knowledge of networking, endpoints, servers, and systems
• Experience working with security monitoring, EDR, endpoint protection, SIEM, firewall, or alerting technologies
• Ability to investigate a threat beyond simply responding to an automated alert
• Comfortable working in an evolving environment where security processes and technologies continue to mature
• Ability to work onsite three days per week

Certifications are helpful but not required:

• CompTIA Security+
• CompTIA CySA+
• ISC2 SSCP
• Other relevant cybersecurity or security operations certifications