What are the responsibilities and job description for the Cyber Security Analyst position at Vaco by Highspring?
Senior Security Analyst
Location: Columbia, TN (Onsite)
Schedule: Full-Time, Monday–Friday (7am–4pm or 8am–5pm)
Type: 6-Month Contract-to-Hire
Compensation: $50.25/hr (W2)
Start Date: ASAP
If you''ve ever wanted the opportunity to build something instead of inheriting a mature security program, this could be that role.
We''re looking for a Senior Security Analyst to become the organization''s first dedicated cybersecurity hire. You''ll work directly with IT leadership, help shape security strategy, and serve as the primary security resource across the business.
This is a hands-on position that combines security operations, vulnerability management, incident response, compliance, and security program development. You''ll have visibility with leadership and the chance to influence how security evolves as the company continues to grow.
What You''ll Be Doing
- Own day-to-day security operations and help mature the overall cybersecurity program
- Manage and optimize security tools including EDR, vulnerability management, SIEM, and application control platforms
- Lead vulnerability identification, prioritization, remediation tracking, and reporting
- Respond to security incidents and coordinate investigations with internal teams and external partners
- Serve as the primary point of contact for the organization''s managed security provider
- Support HIPAA Security Rule compliance activities and security risk assessments
- Maintain security documentation, policies, standards, and procedures
- Partner with infrastructure and leadership teams to evaluate and communicate risk
- Provide security guidance for projects, new technologies, and system implementations
- Help mentor infrastructure team members and promote security best practices throughout the organization
What We''re Looking For
- 5 years of experience in cybersecurity, security operations, or a related security-focused role
- Experience working with EDR solutions (SentinelOne preferred)
- Experience with vulnerability management platforms (Tenable preferred)
- Experience investigating alerts and working with SIEM solutions
- Familiarity with application control or zero-trust technologies such as ThreatLocker
- Understanding of security risk assessments, vulnerability remediation, and security governance
- Ability to explain technical risk to both technical and non-technical audiences
- Strong troubleshooting, documentation, and communication skills
Healthcare and Compliance Experience
This environment operates within healthcare, so experience supporting HIPAA-regulated organizations is highly valued.
Experience with any of the following is especially helpful:
- HIPAA Security Rule
- Security Risk Assessments
- Audit preparation and documentation
- Risk management and remediation planning
- NIST Cybersecurity Framework
- CIS Controls
Nice to Have
- Penetration testing experience
- SentinelOne
- Tenable
- ThreatLocker
- Azure security and Entra ID
- KnowBe4
- PowerShell, Python, or automation experience
- CISSP, CySA , GCIH, CEH, OSCP, or similar certifications
Salary : $53