Clinica Sierra Vista is excited to be one of the largest Federally Qualified Health Centers in the Nation! We’re honored to serve the men and women of the fields. We also offer care and support to the inner city, the rural and isolated, those of low, moderate, and fixed incomes, and families from an array of cultural backgrounds who speak several languages. We don’t inquire about immigration status because we simply don’t need to know. If you come to us, we will treat you like any other patient. As we grow our team, we are looking for individuals who believe the patient is always #1.

Why work for us?

Competitive pay which matches your abilities and experience
Health coverage for you and your family
Generous number of vacation days per year
A robust wellness plan and health club discounts
Continuing education assistance to grow and further your talents
403(B) plan with company matching

Intrigued? We’d love to hear from you! Please review the job details below and then click “apply.”

We're looking for someone to join our team as a Security Analyst who:

The Security Analyst monitors, detects, and investigates security events across the organization’s environment as the first line of analytical response within the Information Security program. Working from the security operations queue, this role performs alert triage and investigation, determines true and false positives, and escalates confirmed incidents to senior security staff. The Security Analyst operates security tools including the SIEM, endpoint detection platform, and vulnerability scanner—as a practitioner, using them to identify threats and support investigations. This is an execution-focused role that works under the direct guidance of the Security Engineer III and Information Security leadership, following defined playbooks and procedures.

Essential Functions:

Strategy & Planning

Execute security monitoring, triage, and investigation procedures per established team playbooks.
Research security alerts, threat indicators, and emerging vulnerabilities; summarize and report findings to senior security staff.
Support risk assessments, compliance reviews, and incident analyses through accurate data collection and documentation.
Attend security team meetings and agile ceremonies; provide timely status updates on assigned tasks and open items.

Acquisition & Deployment

Operate security platforms including SIEM, EDR, vulnerability scanner, and email security tools as a practitioner and analyst, not as an administrator.
Perform routine validation checks across security platforms to confirm data quality and alert fidelity.
Support SIEM log source and asset onboarding by verifying expected data flow and documenting results.
Assist with testing security tool configurations and policy changes as directed.

Operational Management

Monitor the security alert queue and SIEM dashboard daily; triage alerts by severity, determine true or false positive status, document findings, and escalate confirmed incidents per defined criteria.
Correlate log data across endpoint, network, email, and identity sources; apply threat intelligence from approved feeds to enrich active investigations and alert context.
Support incident response activities by collecting logs, screenshots, and evidence; document all actions taken in the incident record.
Analyze vulnerability scan results; research CVE context and exploitability, assign risk priority, and track remediation status for assigned systems.
Complete security tickets, service requests, and ad-hoc tasks with accurate, timely documentation; assist with audit and compliance evidence collection (HIPAA, HITRUST, NIST) and coordinate with IT and Infrastructure teams as directed.

You'll be successful with the following qualifications:

Bachelor's degree in Information Security, Computer Science, or related field, or equivalent practical experience.
2–5 years of experience in a security analyst role or related IT field.
Working knowledge of on-premises infrastructure including Active Directory, DNS, Group Policy, Windows Server, and VMware vSphere/ESXi.
Basic understanding of network security, firewalls, encryption, and threat detection systems.
Familiarity with security tools such as SIEM, antivirus, IDS/IPS, and firewall platforms.
Working knowledge of security and compliance frameworks including HIPAA, NIST, and CIS Controls.
Experience with Microsoft security tools—including Defender for Endpoint, Sentinel, Purview, and Intune—is a strong plus; candidates with equivalent experience on comparable platforms who demonstrate transferable skills will be considered.
Strong interest in cybersecurity and commitment to continuous learning.
Certifications such as CompTIA Security+, CompTIA CySA+, or equivalent are preferred but not required.

Clinica Sierra Vista values human rights, goodwill, respect, inclusivity, equality, and recognizes that the organization derives its strength from a rich diversity of thoughts, ideas, and contributions. As leaders in healthcare industry, we aspire to be an employer of choice by promoting an organizational culture that reflects these core values. We seek to attract, develop, and retain a talented and dedicated workforce where people of diverse races, genders, religions, cultures, political affiliations and lifestyles thrive. Our goal is to create a welcoming and inclusive environment that empowers our employees to provide the highest level of service to our community of residents and businesses; they’re counting on us.

Clinica Sierra Vista is an equal opportunity employer and strives to attract qualified applicants from all walks of life without regard to race, color, ethnicity, religion, national origin, age, sex, sexual orientation, gender identity, gender expression, marital status, ancestry, physical disability, mental disability, medical condition, genetic information, military and veteran status, or any other status protected under federal, state and/or local law. We aim to create an environment that celebrates and embraces the diversity of our workforce. We welcome you to join our team!