Opportunity at
Abby CareSenior Security Analyst
Abby Care is expanding its technology team and seeks a Senior Security Analyst to spearhead threat detection, security operations, and risk management initiatives. Operating within the…
Career Tools
About This Role
Abby Care is expanding its technology team and seeks a Senior Security Analyst to spearhead threat detection, security operations, and risk management initiatives. Operating within the healthcare technology sector, the organization builds an artificial intelligence-native platform designed to enable, train, and support family caregivers. This position reports directly to the Director of IT, Information and Security. This role is ideal for a cybersecurity professional who enjoys translating technical risks for…
Job Description
Abby Care is expanding its technology team and seeks a Senior Security Analyst to spearhead threat detection, security operations, and risk management initiatives. Operating within the healthcare technology sector, the organization builds an artificial intelligence-native platform designed to enable, train, and support family caregivers. This position reports directly to the Director of IT, Information and Security.
This role is ideal for a cybersecurity professional who enjoys translating technical risks for business stakeholders, thinking like an attacker, and transforming alerts into decisive actions. The selected candidate will direct end-to-end incident response, oversee vulnerability management lifecycles, and enforce security controls across cloud, endpoint, and identity systems. Additionally, the position involves establishing guardrails and acceptable-use policies for enterprise artificial intelligence tools, mitigating shadow AI, and collaborating with engineering teams to address model-specific vulnerabilities.
This is a full-time, remote position based in the United States with a requirement to operate during Pacific Standard Time hours. The company values team members who match the urgency of families waiting for care while maintaining precision and high standards.
Responsibilities
- Manage end-to-end incident response, threat hunting, and root cause analysis utilizing cloud security tools, endpoint detection and response systems, and security information and event management platforms.
- Build and sustain incident response playbooks, runbooks, and tabletop exercises.
- Direct the vulnerability management lifecycle by collaborating with engineering and information technology teams to remediate audit, pen test, and scan findings.
- Maintain the company risk register, execute third-party vendor risk assessments, and communicate technical risks to business stakeholders.
- Audit and enforce security controls across Google Workspace, Okta, SentinelOne, and JAMF alongside information technology staff.
- Gather evidence and drive remediation for compliance audits such as HIPAA, SOC 2, ISO 27001, and PCI DSS while aligning policies with CIS and NIST CSF frameworks.
- Automate reporting, response, and detection workflows through scripting, application programming interfaces, and security orchestration, automation, and response tools.
- Mentor team members and foster cross-functional security knowledge sharing.
- Create acceptable-use policies and guardrails for enterprise artificial intelligence applications to prevent data leakage and manage vendor risks.
- Collaborate with product and engineering departments to remediate and assess artificial intelligence and large language model vulnerabilities including prompt injection and model abuse.
Requirements
- Over 8 years of professional background in security operations, managing incident response completely from detection through remediation.
- Hands-on experience utilizing vulnerability scanners, security information and event management systems, endpoint detection and response tools like SentinelOne, cloud security, and core identity and access management principles.
- Working familiarity with security frameworks like CIS, NIST, ISO 27001, and SOC 2.
- Demonstrated ability to translate technical risk into clear concepts for business stakeholders.
- Familiarity with emerging artificial intelligence and large language model risks.
- Strong communication skills with the capacity to prioritize multiple competing incidents and remain calm under pressure.
Qualifications
- Associate degree or Bachelor degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent practical experience.
- Prior work experience within the health tech or healthcare industry with knowledge of data privacy mandates like HIPAA.
- Practical background using Google Workspace, JAMF, or Okta.
- Experience using Infrastructure as Code tools such as Terraform for security policy and access management.
- Scripting proficiency in Python or Bash, exposure to security orchestration, automation, and response, and familiarity with cloud security posture management tools or native cloud security platforms across AWS, GCP, or Azure.
- Direct experience securing generative artificial intelligence deployments or artificial intelligence and machine learning pipelines, or operating artificial intelligence-driven security platforms.
- Professional credentials including Security+, OSCP, GCIA, GCIH, or CISSP.
Core Skills
Benefits
- Competitive compensation packages tailored to the value delivered by the team member.
- Comprehensive health coverage including medical, dental, and vision options with a zero dollar deductible preferred provider organization plan and a company-funded health savings account.
- Employer-paid life insurance and disability insurance.
- Paid time off policies along with 10 paid company holidays.
- Financial benefits consisting of health savings account contributions, optional flexible spending accounts, commuter benefits, and full coverage of all 401(k) account fees.
- Paid parental leave of up to 10 weeks depending on tenure.
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, this is a full-time remote opportunity based in the United States, though it requires working Pacific Standard Time hours.
What is the salary for the Senior Security Analyst role?
The source posting does not specify the salary for this position.
What kind of industry experience is preferred?
Prior experience working in the healthcare or health technology industry with an understanding of HIPAA and other data privacy requirements is preferred.
Does Abby Care use automated decision tools during hiring?
Yes, the company may use automated decision tools to help match and rank candidate experience and education against job requirements, though all hiring decisions involve final human review.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
