Senior Security Analyst

Marathon Health is a leading advanced primary care provider, partnering with employer and union plan sponsors to improve health for millions of Americans. With nationwide onsite, nearsite, and network health centers, and virtual primary care, Marathon delivers a value-based model that enhances the healthcare experience for members and providers, while driving meaningful cost savings for plan sponsors. Marathon is proud to be certified as a Great Place to Work®, reflecting the company's commitment to building an inclusive, high-trust culture where all employees can thrive. Learn more at marathon.health ABOUT THE JOB The Senior Security Analyst leads cross functional projects to implement key security initiatives. The individual in this role will lead efforts to identify, design and implement automation across company systems and processes and will work closely with CISO to drive security initiatives and security program maturity.     ESSENTIAL DUTIES & RESPONSIBILITIES Automate common security task. Respond to Customer security assessments and audit requests. Provide security leadership across business in support of company key initiatives. Evaluate security vendors and drive optimization of security tools and services. Lead HITRUST, SOC2, PCI DSS assessment, remediation, documentation, and certification activities. Assist in design and execution of security related training programs and communications. Lead projects to optimize security configurations and management of laptops and other devices. Investigate, document, and remedy security incidents. Automate Incident Response playbooks and IT Security Procedures. Regularly introduce emerging technologies and services that can help Marathon maintain its competitive technical advantage. Experience with Securing Software Development including security of Github, code scanning, and AI code development.

Bachelor’s degree in computer science, Information Technology, Cybersecurity, Data Science or a related field and 5-7 years combined experience in broader IT and Security roles.  Security certifications related to job responsibilities are highly desirable (e.g. Sec+, CEH, CASP, CISSP). DESIRED ATTRIBUTES Experience creating automation using PowerShell or similar. Hands on experience with security event triage, Windows OS, networking, SIEM, Incident Response, Server and endpoint hardening, application security best practices. Specific experience with Microsoft Defender, Cisco, Meraki, Dell laptops, AWS, Salesforce, Microsoft 365, Smartsheet, and PowerShell is highly desired. Working knowledge of privacy and security standards (e.g., HIPAA, HITRUST, NIST). Proven track record in developing and implementing security policies and procedures. Exceptional written and verbal communication skills, with the ability to engage and collaborate across all levels of the organization. Demonstrated capacity to translate technical security concepts into clear, non-technical language for diverse audiences. Data driven with the ability to take abstract security concepts and establish measurable objectives. Proven project management skills, with the ability to apply these skills to security initiatives, ensuring smooth execution and timely completion. Collaborative mindset, with the ability to work effectively across diverse teams and stakeholders, fostering strong relationships and alignment. Proficiency with Microsoft Office tools, particularly strong expertise in Excel, for data analysis, reporting, and compliance. Experience with Securing Software Development including security of Github, code scanning, and AI code development. Pay Range: $100,000 - $125,000/yr The actual offer may vary dependent upon geographic location and the candidate’s years of experience and/or skill level. We are accepting applications for this position until a candidate has been selected.  To apply to this position and learn more about open jobs at Marathon Health, visit our careers page.