Jr. Cyber Security Analyst
About the position
New York Cancer & Blood Specialists (NYCBS) is seeking a talented Jr. Cyber Security Analyst to help monitor, investigate, and protect the systems, networks, medical devices, and patient data that keep the organization running. This role involves reviewing security alerts, assisting with vulnerability scanning, and supporting incident response, providing hands-on experience within a clinical and administrative environment. The position is ideal for someone early in their security career who is curious, detail-oriented, and eager to learn in a highly regulated environment where security failures can significantly impact patient care and safety.
Responsibilities
- Monitor security tools and dashboards (SOC, EDR, email security, etc.) and triage alerts.
- Escalate and document suspicious activity, working with senior engineers to determine if an alert is a false positive or a real incident.
- Assist with vulnerability scanning, track remediation progress, and follow up with system owners.
- Support incident response efforts through evidence gathering, timeline building, and after-action documentation.
- Perform routine access reviews and help maintain least-privilege practices across applications.
- Review phishing reports submitted by staff.
- Assist with HIPAA and other healthcare compliance activities, including gathering evidence for audits and risk assessments.
- Maintain security documentation and policies.
- Support security awareness training for clinical, administrative, and IT staff.
- Stay current on emerging threats and healthcare-specific attack trends (e.g., ransomware targeting hospital systems, PHI breaches, medical device vulnerabilities).
Requirements
- 1+ years of experience in IT, help desk, systems administration or a security-related role, or a degree, bootcamp or equivalent coursework in cybersecurity or information technology
- Foundational understanding of networking concepts, operating systems, and common security controls
- Familiarity with core security concepts such as authentication, encryption, malware, and phishing
- Strong attention to detail and good documentation habits
- Clear communication skills, able to explain technical issues to non-technical clinical and administrative staff
- Willingness to learn, ask questions and take direction from senior team members
- Ability to handle sensitive information with discretion
Nice-to-haves
- Hands-on exposure to security tools such as SOC platforms, vulnerability scanners, or EDR solutions
- Entry-level certifications such as CompTIA Security+, Network+ or similar
- Familiarity with HIPAA or other healthcare data privacy and security regulations
- Basic scripting or automation experience (PowerShell, Python, etc.)
- Experience working in a hospital, health systems, or clinical environment
Benefits
- Health Insurance starting Day 1
- Dental
- Vision
- Life Insurance
- Short & Long-Term Disability
- Generous PTO
