Cyber Security Analyst

Senior Security Analyst Location: Columbia, TN (Onsite) Schedule: Full-Time, Monday–Friday (7am–4pm or 8am–5pm) Type: 6-Month Contract-to-Hire Compensation: $50.25/hr (W2) Start Date: ASAP If you've ever wanted the opportunity to build something instead of inheriting a mature security program, this could be that role. We're looking for a Senior Security Analyst to become the organization's first dedicated cybersecurity hire. You'll work directly with IT leadership, help shape security strategy, and serve as the primary security resource across the business. This is a hands‑on position that combines security operations, vulnerability management, incident response, compliance, and security program development. You'll have visibility with leadership and the chance to influence how security evolves as the company continues to grow. What You’ll Be Doing Own day-to-day security operations and help mature the overall cybersecurity program Manage and optimize security tools including EDR, vulnerability management, SIEM, and application control platforms Lead vulnerability identification, prioritization, remediation tracking, and reporting Respond to security incidents and coordinate investigations with internal teams and external partners Serve as the primary point of contact for the organization's managed security provider Support HIPAA Security Rule compliance activities and security risk assessments Maintain security documentation, policies, standards, and procedures Partner with infrastructure and leadership teams to evaluate and communicate risk Provide security guidance for projects, new technologies, and system implementations Help mentor infrastructure team members and promote security best practices throughout the organization What We’re Looking For 5+ years of experience in cybersecurity, security operations, or a related security-focused role Experience working with EDR solutions (SentinelOne preferred) Experience with vulnerability management platforms (Tenable preferred) Experience investigating alerts and working with SIEM solutions Familiarity with application control or zero-trust technologies such as ThreatLocker Understanding of security risk assessments, vulnerability remediation, and security governance Ability to explain technical risk to both technical and non-technical audiences Strong troubleshooting, documentation, and communication skills Healthcare and Compliance Experience This environment operates within healthcare, so experience supporting HIPAA-regulated organizations is highly valued. Experience with any of the following is especially helpful: HIPAA Security Rule Security Risk Assessments Audit preparation and documentation Risk management and remediation planning NIST Cybersecurity Framework CIS Controls Nice to Have Penetration testing experience SentinelOne Tenable ThreatLocker Azure security and Entra ID KnowBe4 PowerShell, Python, or automation experience CISSP, CySA+, GCIH, CEH, OSCP, or similar certifications #J-18808-Ljbffr