IT Security Analyst

Join Our Team as an IT Security Analyst at ABS Kids

This is a brand new remote role that will help protect and improve the security of ABS Kids' Microsoft 365, cloud, identity, endpoint, and collaboration environments. This role monitors alerts, investigates incidents, maintains security controls, supports compliance efforts, and promotes security awareness across the organization. The ideal candidate brings hands-on Microsoft 365 security experience — including Defender, Intune, Entra ID, and Purview — and thrives in a fast-paced, compliance-driven healthcare environment. At ABS Kids, we provide top-quality, evidence-based ABA therapy to kids with autism. Our mission? Empower families and create "wow" moments every day-and we can't do it without amazing people like you.

What's In It For You?

• $85,000-$115,000/year + annual bonus
• Weekdays only (M-F, 8am-5pm) - no weekends!
• PTO - 10 holidays + 15 vacation days
• Full benefits package - medical, dental, vision, 401K match & more
• Real career growth and a supportive, mission-driven team

What You'll Do:

Security Monitoring & Incident Response

• Monitor and investigate security alerts across Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Microsoft Sentinel.
• Respond to phishing, account compromise, malware, unauthorized access, and endpoint threats — coordinating containment, remediation, root-cause analysis, and post-incident documentation with IT and Compliance teams.
• Coordinate with the ABS Kids managed SOC provider for alert triage, escalation, and incident response. Maintain and improve incident response playbooks and escalation procedures.

Identity & Access Management

• Administer and monitor MFA, Conditional Access, Privileged Identity Management, role-based access, and least-privilege controls within Microsoft Entra ID.
• Review risky users, risky sign-ins, privileged roles, guest access, enterprise applications, and OAuth app permissions to identify and remediate identity-related risks.
• Endpoint Security & Device Management
• Develop and maintain Intune compliance policies, configuration profiles, security baselines, and application protection controls across Windows, macOS, iOS, and Android.
• Monitor endpoint compliance, support Defender for Endpoint investigations, and drive remediation of noncompliant or high-risk devices in partnership with IT teams.

Vulnerability Management & Threat Intelligence

• Conduct vulnerability assessments across Microsoft 365, endpoints, and cloud services. Track findings and work with system owners to remediate vulnerabilities, misconfigurations, and control gaps.
• Assist with threat hunting, detection tuning, and monitoring improvements. Research emerging threats and assess potential impact to the ABS Kids environment.

Data Protection & Compliance

• Support Microsoft Purview initiatives including Data Loss Prevention, sensitivity labels, retention policies, audit logging, and data governance controls.
• Assist with HIPAA security controls, compliance audits, risk assessments, vendor security reviews, and business continuity planning. Manage compliance incident documentation in Healthicity.
• Maintain the IT Security Register, risk documentation, incident records, and remediation tracking.

Security Awareness & Communication

• Develop security awareness communications and training on phishing, password security, and safe use of Microsoft 365 tools. Coordinate phishing simulations with IT teams.
• Communicate security findings and recommendations clearly to technical and non-technical stakeholders, and promote a culture of security accountability across ABS Kids.

You're A Great Fit If You:

• Have a Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field or equivalent experience
• 3+ years of experience in information security, cloud security, security operations, or systems administration with security responsibilities
• Experience with Microsoft Sentinel, KQL, Microsoft Purview or Microsoft Security Exposure Management
• Experience with PowerShell, Python, or Microsoft Graph API for security automation or reporting
• Experience supporting HIPAA security controls, compliance audits or healthcare IT environments

Who We Are:

• It's in the wow moments that we find our purpose at ABS Kids. Our shared experiences are the milestones that influence our work. The mission of our work with children with autism and their families feeds our spirit. With every wow moment, we can see our impact grow.
• At ABS Kids we are empowered by the breadth of our differences. Our mission is to create a culture where all people thrive because their diverse stories are heard and celebrated. We commit to an evolving understanding of diversity as we learn from one another.
• We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.