Information Security Analyst

Job Type: The position is based in-person and requires travel to all Mindful Support Services office locations, including occasional out-of-state business trips. The position also requires off-site travel as needed to support with job requirements such as projects, equipment/supply needs, and repairs.   

Salary: 78,000-82,000 per year with opportunity for advancement with tenure and performance.

About Mindful Support Services   

We are a business to business support service for independent mental healthcare practitioners which helps providers service a growing client base. We provide administrative and organizational services to simplify the processes of sourcing leads, marketing, billing and collecting payments from patients and insurers. We have grown to support over 2,000 mental healthcare providers since we opened in 2011. 

We have built the Mindful Therapy Group brand from the ground up with years of dedication to solving the complex processes of the healthcare landscape in innovative ways, creating a platform geared toward growth, and working to meet our mission of creating improved access to high quality mental healthcare.  

About the Role  

The Information Security Analyst will work directly with the Information Security Manager to improve Mindful Therapy Group's internal security and IT infrastructure. This role is expected to have experience and understanding of defensive (blue team) security best practices, with the ability to immediately perform audits and investigations for potential security threats. Additionally, this role is expected to execute large, complex projects with guidance from the Information Security Manager.  

The Information Security will also work together with the greater Operations team to be an important member for escalated security and technology support requests. This role will regularly collaborate on internal, cross-department projects and will work with external vendors. This is a full-time position that is fast paced with ample opportunities to learn and grow.   

Work Environment  

The position is based in-person and requires travel to all Mindful Support Services office locations, including occasional out-of-state business trips. The position also requires off-site travel as needed to support with job requirements such as projects, equipment/supply needs, and repairs.   

The responsibilities described are not intended to be a comprehensive list of requirements for this job. Responsibilities, duties, and activities may change at any time with or without notice.  

Requirements

Responsibilities:  

• Audit systems, networks, and security logs during incidents and outages to remediate and determine root cause. 

• Integrate logging from existing infrastructure and SaaS solutions to a centralized SIEM. 

• Develop scripts and automations to streamline the detection and alerting of incidents and outages. 

• Provide tier 2/3 technical support for troubleshooting and issue resolution. 

• Drive security and infrastructure projects including creating project plans, drafting communications, and consulting with internal stakeholders. 

• Collaborate with external vendors on technology and security initiatives.  

• Provide recommendations to the Information Security Manager on improvements or when identifying gaps on internal security practices. 

• Update and maintain security controls in cloud amin portals such as Azure, M365, Google Cloud Platform, etc. 

• Draft updated security policies, procedures, guidelines, and training courses in collaboration with Information Security Manager. 

• Draft recaps for information security incidents.  

• Perform annual security compliance audits for CIS benchmarks and HIPPA compliance. 

• Complete application security reviews for new software solutions and application requests from employees.  

• Perform updates to on-prem and cloud systems and networks. 

Core Competencies 

• Strong understanding of “blue team” security concepts and practices such as log analysis, executing audits, compliance, and risk assessments. 

• Proficiency with SIEMs, networking, and servers on prem and in the cloud. Working experience with CrowdStrike is a plus. 

• Familiarity with scripting or coding with the ability to write simple automations and perform API calls in at least 1 language. Specifically, PowerShell, Bash, Golang, C#, or Python are a plus. 

• Basic understanding of cloud architecture such as Azure, AWS, or GCP. Azure specifically is a plus.  

• Abil