Lead Cyber Security Analyst

Salary: $135,000 - 160,008 per year Requirements:

• We require a bachelors degree in Computer Science, Information Technology, Business Administration, or a related discipline, or an equivalent blend of education and experience.
• We expect 6+ years of information security experience, including exposure to several of these areas: risk management, audit, compliance, security engineering, project management, architecture, and governance.
• We need at least 1 year of formal mentoring experience for technology professionals.
• We look for proven experience leading team efforts in designing, implementing, or maintaining security tools such as threat assessment platforms, risk management solutions, or vulnerability scanning systems.
• We require demonstrated leadership in security assessments, security control analysis, risk reviews, vulnerability assessments, or penetration testing for highly complex systems supporting critical operations such as patient care, finance, or HR.
• We expect advanced knowledge of security technologies, systems, and tools, along with the ability to coach others in their use.
• We look for hands-on experience using threat modeling and vulnerability review to influence the design of highly interconnected enterprise environments.
• We require a strong grasp of information security threats and weaknesses, and the ability to translate them into business risk.
• We expect advanced knowledge of common security standards and regulations such as NIST 800-53/CSF, ISO 27001/2, HIPAA, PCI DSS, and SOC, with the ability to apply them effectively.
• We seek demonstrated experience leading service delivery, team activities, and related initiatives.

• We coordinate and oversee operational activities to support the Managers direction and priorities, ensuring core services meet established performance targets.
• We lead vulnerability and risk assessment efforts across UW Medicine entities and vendors where issues could significantly affect business operations.
• We design, develop, and implement security tools, platforms, and methods informed by industry frameworks such as HIPAA, HITRUST, and NIST to reduce risks to patient care and critical operations.
• We deploy prescribed tools to uncover system and software vulnerabilities and to support or validate enterprise risk assessments.
• We incorporate threat intelligence into vulnerability assessments, risk reviews, and mitigation actions across the enterprise.
• We maintain and update the UW Medicine risk register and risk management program.
• We create and deliver user training, security awareness initiatives, and organization-wide security documentation, including policies, standards, and operating procedures.
• We prioritize and assign work within a team of Cyber Security Analysts, manage daily workflow, and report assignment status to the Manager.
• We serve as an escalation point for operational and service-related issues.
• We identify opportunities to improve service management and operational effectiveness.
• We provide guidance, coaching, and mentorship to the team on methods, best practices, and practical expertise.
• We act as the Managers delegate when representing the team to customers, project managers, technical leaders, and organizational management.
• We lead information security service delivery with a continuous improvement focus and provide metrics that inform business and leadership decisions.
• We oversee team support for applications, infrastructure, and technology projects to ensure secure design and alignment with organizational risk objectives.
• We advise technical and non-technical stakeholders, internal and external, on security practices that reduce compromise risk across people, processes, and technology.
• We monitor, and help build monitoring capabilities for, threats, vulnerabilities, and risks to enable proactive response.
• We lead efforts to track and mitigate known and emerging threats to strengthen threat awareness, risk assessment, threat detection and analysis, incident response, and cyber security operations.
• We collaborate with Cyber Security Engineers on incident triage, containment, and investigation as needed within the incident management process.
• We mentor analysts and other team members.

• Incident Management
• Support
• Security

More:

We are UW Medicine IT Services, a shared services organization supporting the full UW Medicine system, including Harborview Medical Center, UW Medical Center-Montlake, UW Medical Center-Northwest, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest. This is a 100% remote Lead Cyber Security Analyst opportunity with a Monday through Friday day schedule and core hours of 8:00 a.m. to 5:00 p.m. Pacific time. We offer 15 days of vacation in the first year, 12 days of sick time, 1 personal holiday, 11 paid holidays annually, and a 403(b) plan with 100% matching and immediate vesting. The role is a regular full-time position with a pay range of $135,000 to $160,008 annually. We are part of the University of Washington, committed to an inclusive, respectful, and welcoming community where our employees collaborate to advance health, education, and research while making life healthier for everyone in our community.

last updated 33 week of 2026