Job Summary Fortified Health Security is seeking a hands-on Information Security Analyst to support a healthcare client through a full-time, staff augmentation engagement. This Security Analyst will work directly with the client's technology and operations teams as well as Fortified's vCISO and EOD team to assist with a variety of technical security tasks--focusing on email security, endpoint protection, firewall administration, and user access governance. This role involves day-to-day operational support and project work across several security platforms and tools. Client-Specific Responsibilities The following duties are normal for this position. The omission of specific statements of duties does not exclude them from being expected of this position if the work is similar, related, or a logical assignment for this position. Other duties may be required.

Email & Messaging Security:

Understand O365 environment; knowledge of Abnormal (or other email security tools), and Exchange routing. Assist with email spoofing/spam reviews and graymail analysis.

Phishing Defense:

Conduct second-pass reviews via Abnormal or KnowBe4 PhishER.

Endpoint Security:

Knowledge of SentinelOne other endpoint security tools. Address endpoint alerts and incident response.

Firewall Rule Review and Recommendations:

Review N/S and E/W rules using Palo Alto and server-to-web or rule-based filtering.

MFA/SSO:

Understanding of various MFA tools and Entra SSO scenarios as needed.

Policy & Procedure Support:

Contribute to documentation and configuration standards for tools in use.

Incident Handling:

Triage detections escalated from the SOC or abnormal activity in O365 or other security platforms. Investigate security breaches and other cybersecurity incidents.

• Help standardize control operations across cloud (M365), endpoint, and perimeter defense systems.
• Collaborate with Client's teams, Client's third parties, and Fortified departments, to ensure a holistic approach to cybersecurity.

Essential Job Functions The following duties are normal for this position. The omission of specific statements of duties does not exclude them from being expected of this position if the work is similar, related, or a logical assignment for this position. Other duties may be required.

• Have an understanding of healthcare business operations, the healthcare cybersecurity landscape, and the healthcare regulatory environment.
• Collaborate with Fortified's vCISO to mature the client's security posture and close documented gaps.
• Assist vCISO in the identification and proposal of key information security priorities, initiatives, plans, practices, and tools.
• Research potential and emerging information security threats, vulnerabilities, and potential control techniques and communicate this information to vCISO.
• Develop necessary policies / procedures / processes pertaining to Cybersecurity Risk Management.
• Install security measures and operate software to protec.

..