ModMed

Security Operations

• Oversee monitoring of security alerts and events from various security tools and partners (e.g., SIEM, GuardDuty, MSSP).
• Conduct advanced analysis of security events to identify and mitigate potential threats.
• Provide guidance and support to junior analysts in their investigations.
• Lead the response to complex security incidents, including identification, containment, eradication, and recovery.
• Conduct root cause analysis and develop remediation plans.
• Document incident details and maintain comprehensive incident response records.
• Lead the integration of threat intelligence into security operations processes and provide threat intelligence insights to improve security posture.
• Stay updated on advanced threat landscapes and emerging security threats.
• Oversee management, optimization, deployment, and configuration of security tools and technologies used within security operations.
• Evaluate and recommend new security technologies and solutions.
• Maintain detailed documentation, prepare regular reports on security activities, incidents, and metrics for management.
• Develop and maintain security operations procedures and playbooks.
• Mentor and train junior security analysts; lead security operations team meetings and provide regular feedback.
• Develop and implement training programs to enhance analysts' skills and collaborate with other teams to integrate cybersecurity best practices.

Senior Security Operations Analyst

Security Engineer

• Responsible for the operational success, health, and administration of key security solutions across the Information Security organization
• Ensure endpoint detection and response (EDR) agents are healthy and fully deployed
• Monitor, troubleshoot, and ensure optimal functioning of EDR agents and other deployed security solutions
• Serve as the de facto administrator for core security platforms including EDR, IAM, and DLP systems; maintain configurations, apply updates, and optimize settings for performance and security
• Partner with IT, CloudOps, and other internal teams to ensure successful deployment, integration, and coverage of security solutions across the enterprise
• Support the operational rollout and enablement of enterprise IAM and DLP solutions, ensuring adoption and effectiveness
• Provide ongoing status reporting on tool health, coverage, and identified gaps to leadership and proactively recommend improvements

• Perform vulnerability scanning and assessments across enterprise systems, applications, and networks
• Analyze and prioritize vulnerabilities based on risk and exploitability; coordinate remediation with system owners and engineering teams
• Track remediation progress and produce vulnerability management metrics for leadership and compliance reporting
• Investigate and analyze security events by correlating logs, network traffic, and system telemetry
• Support incident response activities, including containment, forensic data collection, root cause analysis, and lessons learned reviews
• Research emerging vulnerabilities, threats, and attack techniques to inform detection, response, and risk management
• Collaborate with the Security Operations Analysts to integrate vulnerability intelligence and technical findings into threat detection and response workflows
• Develop and maintain operational playbooks, procedures, and technical documentation to support audits, compliance, and continuous improvement

Senior Security Operations Analyst

Security Engineer

Security Operations Engineer