Security Analyst

Information Security Analyst IIThe Information Security Analyst II supports the protection of sensitive healthcare information, clinical systems, and technology infrastructure. This role focuses on threat detection, incident response, vulnerability management, and compliance with healthcare regulations such as HIPAA and HITECH. The analyst collaborates with IT, clinical, and business stakeholders to reduce risk and ensure the confidentiality, integrity, and availability of electronic protected health information (ePHI).Key ResponsibilitiesMonitor security events and alerts using SIEM, EDR, and other security tools to detect potential threats impacting healthcare systems and dataInvestigate, respond to, and document security incidents involving ePHI, clinical applications, and enterprise infrastructureSupport incident response activities including containment, recovery, root-cause analysis, and post-incident reportingConduct vulnerability scanning and risk assessments of servers, endpoints, medical devices, and healthcare applicationsAssist with remediation efforts and validate security control effectiveness in collaboration with IT, clinical engineering, and application teamsSupport compliance with healthcare regulatory requirements including HIPAA, HITECH, and organizational security policiesParticipate in audits, risk assessments, and third-party security reviewsMaintain and update security documentation, incident response playbooks, and standard operating proceduresContribute to security awareness initiatives and provide guidance to staff on protecting patient informationStay informed of emerging healthcare cybersecurity threats, ransomware trends, and industry best practicesRequired QualificationsBachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)3–5 years of experience in information security, security operations, or related IT rolesHands-on experience with:Security monitoring and incident responseVulnerability management tools and processesEndpoint, network, and identity security controlsWorking knowledge of:HIPAA Security Rule requirementsWindows and Linux operating systemsNetworking fundamentals (TCP/IP, DNS, firewalls)Common attack techniques targeting healthcare environmentsStrong analytical, documentation, and communication skillsAbility to work effectively in a regulated, patient-care-focused environmentNo more than 50-75 miles from KH ASBPreferred QualificationsExperience in healthcare, hospital, payer, or clinical environmentsFamiliarity with electronic health record (EHR) platforms and clinical systemsExperience securing cloud-based healthcare workloads (Azure, AWS, or GCP)Scripting or automation experience (PowerShell, Python, or similar)Certifications such as:CompTIA Security+ or CySA+HCISPP, SSCP, GCIH, or similarOverviewKettering Health is a not-for-profit system of 14 medical centers and more than 120 outpatient facilities serving southwest Ohio. Our mission is to live God's love by promoting and restoring health. Our commitment to our patients is to help individuals be their best. With that context, safety is our top priority. We provide an integrated system of healthcare experts committed to providing exceptional care.