Demo

Security Analyst - Incident Response

Collective Health
Collective Health Salary
San Francisco, CA Full Time
POSTED ON 2/13/2025
AVAILABLE BEFORE 5/10/2025

At Collective Health, we're transforming how employers and their people engage with their health benefits by seamlessly integrating cutting-edge technology, compassionate service, and world-class user experience design.

If you are passionate about our mission and you are an experienced hands-on product and application security professional who is excited about developing and leading a broad range of functions at a mission-driven, highly-regulated technology company, this role is for you.

You'll lead initiatives that address the company's-and some of our industry's-most sophisticated and meaningful security and architectural challenges. You will build relationships across all parts of the business and drive multi-functional initiatives to continuously improve our security and privacy posture. You will be responsible for building and implementing controls that can scale and optimize as we move into a context-aware security environment.

This position is a hands-on role as a cybersecurity incident first responder. This analyst will assist the Incident Response Lead in providing a rapid initial response to any cybersecurity threats, incidents or cyber attacks on the organization. The analyst will utilize a suite of forensic tools to enable investigations on any issues as they develop. Once the cause of the problem has been identified, you will need to restrict any damage, provide immediate workarounds, work with corporate communications, engineering, etc and if possible provide a solution or fix, so that any intrusion or threat to the organization is negated rapidly. Prepare and practice IR plans, perform tabletop exercises, etc. When not actively responding to incidents, you will proactively identify, research, and prioritize threats and associated threat actors.

What you'll do :

  • Triage high-visibility incidents and report findings to Incident Response Lead and CISO
  • Work closely with the Incident Response Lead to resolve cyber related issues, by providing detailed explanations of the incidents and necessary remediations
  • Manage the day to day operations to identify opportunities for process automation and orchestration of processes by collaborating with cross-functional teams
  • Assist in the development, implementation, and monitoring of a SIEM
  • Oversee remediation activities related to exploited system security vulnerabilities
  • Update documentation around the Incident Response Policy and Incident Playbooks
  • Assist in special projects and recommendations for technical security solutions that align with the department's vision and the needs of the business
  • Be an active part of a 24 / 7 / 365 cyber incident response team
  • Collaborate with team members, understand security processes and workflows, prioritize ideas and innovations, and develop improvements to ensure successful execution
  • Educate both security and non-security user groups on security best practices and security policies
  • Assist in facilitating phishing campaigns and other training opportunities
  • Assist with gathering audit evidence to ensure compliance to security policies as well as regulatory compliance (HIPAA, HITRUST, SOC 1, SOC 2, etc.).
  • Assist in creating and tuning alerting rules from various security tools.

Your skills include :

  • Experience developing threat indicators to be used to develop correlated SIEM alerts
  • Experience in managing incident response and forensic tools
  • Strong experience in performing threat assessments, determining what data is applicable to an industry vertical, and reporting on those findings
  • Basic to moderate experience with common attack scenarios in various common layers within enterprise infrastructure (cloud-based issues, code quality, insider threat, etc.,)
  • Moderate experience with socializing and building partnership on security programs and user expectations
  • Moderate experience with training and mentoring the entire company on security
  • Familiarity with security industry standards (ISO 17799, NIST 800 series, etc.) and best practices
  • Understanding of common cyber attack and defense frameworks such as MITRE, NIST 800-61r2.
  • Pay Transparency Statement

    This is a hybrid position based out of our San Francisco office, with the expectation of being in office at least two weekdays per week. #LI-hybrid

    The actual pay rate offered within the range will depend on factors including geographic location, qualifications, experience, and internal equity. In addition to the salary, you will be eligible for stock options and benefits like health insurance, 401k, and paid time off. Learn more about our benefits at https : / / jobs.collectivehealth.com / benefits / .

    San Francisco, CA Pay Range

    130,000-$170,625 USD

    Why Join Us?

  • Mission-driven culture that values innovation, collaboration, and a commitment to excellence in healthcare
  • Impactful projects that shape the future of our organization
  • Opportunities for professional development through internal mobility opportunities, mentorship programs, and courses tailored to your interests
  • Flexible work arrangements and a supportive work-life balance
  • We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Collective Health is committed to providing support to candidates who require reasonable accommodation during the interview process. If you need assistance, please contact recruiting-accommodations@collectivehealth.com.

    Privacy Notice

    For more information about why we need your data and how we use it, please see our privacy policy : https : / / collectivehealth.com / privacy-policy / .

    Salary : $130,000 - $170,625

    If your compensation planning software is too rigid to deploy winning incentive strategies, it’s time to find an adaptable solution. Compensation Planning
    Enhance your organization's compensation strategy with salary data sets that HR and team managers can use to pay your staff right. Surveys & Data Sets

    What is the career path for a Security Analyst - Incident Response?

    Sign up to receive alerts about other jobs on the Security Analyst - Incident Response career path by checking the boxes next to the positions that interest you.
    Income Estimation: 
    $87,093 - $107,335
    Income Estimation: 
    $111,725 - $147,313
    Income Estimation: 
    $112,673 - $137,290
    Income Estimation: 
    $140,233 - $181,029
    Income Estimation: 
    $161,209 - $233,553
    Income Estimation: 
    $87,093 - $107,335
    Income Estimation: 
    $111,725 - $147,313
    Income Estimation: 
    $112,673 - $137,290
    Income Estimation: 
    $140,233 - $181,029
    Income Estimation: 
    $161,209 - $233,553
    Income Estimation: 
    $112,673 - $137,290
    Income Estimation: 
    $139,945 - $168,577
    Income Estimation: 
    $140,233 - $181,029
    Income Estimation: 
    $161,209 - $233,553
    Income Estimation: 
    $139,945 - $168,577
    Income Estimation: 
    $164,835 - $201,088
    Income Estimation: 
    $135,994 - $168,063
    Income Estimation: 
    $161,209 - $233,553
    Income Estimation: 
    $70,462 - $84,818
    Income Estimation: 
    $77,991 - $108,747
    Income Estimation: 
    $87,093 - $107,335
    Income Estimation: 
    $140,233 - $181,029
    Income Estimation: 
    $161,209 - $233,553
    View Core, Job Family, and Industry Job Skills and Competency Data for more than 15,000 Job Titles Skills Library

    Job openings at Collective Health

    Collective Health
    Hired Organization Address Lehi, UT Full Time
    At Collective Health, we’re transforming how employers and their people engage with their health benefits by seamlessly ...
    Collective Health
    Hired Organization Address San Francisco, CA Full Time
    At Collective Health, we’re transforming how employers and their people engage with their health benefits by seamlessly ...
    Collective Health
    Hired Organization Address Los Angeles, CA Full Time
    At Collective Health, we're transforming how employers and their people engage with their health benefits by seamlessly ...
    Collective Health
    Hired Organization Address Plano, TX Full Time
    At Collective Health, we’re transforming how employers and their people engage with their health benefits by seamlessly ...

    Not the job you're looking for? Here are some other Security Analyst - Incident Response jobs in the San Francisco, CA area that may be a better fit.

    Sr. Incident Response Analyst

    Docusign, San Francisco, CA

    Principal Incident Response Analyst

    Loom, San Francisco, CA

    AI Assistant is available now!

    Feel free to start your new journey!