Security Analyst

• assess threats to ProMedica’s information technology resources and data
• develop policies, processes and procedures related to a comprehensive security program
• ensure compliance with IT security policies
• review security logs for suspicious activities
• investigate security incidents and upgrades
• perform risk assessments
• available for rotational, on-call 24/7 support

IT Security Analyst II

• Support the development, implementation, and monitoring of security policies and controls
• Collaborate with Global Security to ensure alignment with enterprise security standards and frameworks
• Investigate security incidents and collaborate with internal teams for effective resolution
• Coordinate post-incident reporting and remediation
• Partner with the Vulnerability Management team to drive vulnerability remediation, recommend controls, create playbooks
• Conduct periodic access reviews and report security access violations
• Create and deliver high-quality written communications on security, compliance, and audit issues
• Support internal security projects, automation efforts, and process improvements
• Adopt and extend AI-assisted security tooling to reduce toil, accelerate investigations, augment, and simplify recurring security workflows
• Collaborate with engineering teams to embed security best practices into the software development lifecycle (SDLC) and cloud environments
• Perform security assessments of new products and services to ensure the adequacy of security and privacy.

Senior Cyber Security Analyst

Threat Intelligence Specialist

• The Senior Intelligence Analyst (SIA) will be responsible for developing tactical, operational and strategic intelligence information to support ongoing investigations and counter-drug operations.
• Serve as a strategic decision-maker for the implementation of the grant mission with the AGO Criminal Bureau, the Massachusetts State Police and their external partners.
• Supervise and provide guidance to the Intelligence Analyst.
• Conduct and manage complex research into drug cultivation and production, methods of transportation, trafficking routes, and the structure and analysis of trafficking organizations.
• Analyze aggregate datasets and develop methodologies to determine root causes, patterns, and opportunities to improve public safety and generate investigative leads.
• Use data collection and mapping software to compile information to create reports and recommendations for crime prevention and response techniques with local, state, and federal partners.
• Conduct preliminary vetting of incoming tips and intelligence.
• Prepare, summarize, and present investigative findings.
• Coordinate multi-agency collaboration and provide project management and intelligence analysis for all partners.

Senior Intelligence Analyst – Enterprise & Major Crimes Division

• Proactively hunt for indicators of compromise (IOCs) and advanced persistent threats (APTs) across the network, endpoints, and cloud environments using threat intelligence and a hypothesis-driven methodology.
• Conduct in-depth analysis of security events, network traffic, and endpoint data to identify malicious activity and potential breaches.
• Utilize the SIEM and EDR platform extensively, applying expert knowledge of the scripting, SIEM and EDR query language to perform complex searches and data analysis.
• Lead and participate in incident response activities, including containment, eradication, and recovery efforts, serving as a primary escalation point for critical security incidents.
• Develop and refine threat hunting playbooks, procedures, and detection rules to improve the security team’s efficiency and effectiveness.
• Collaborate with the security engineering and security operations center (SOC) teams to integrate new threat intelligence and enhance existing security tools and controls.
• Mentor junior analysts and contribute to the ongoing improvement of the organization's overall security posture.

Senior Cybersecurity Analyst – Threat Hunter

• Lead collaborative workstreams with external partners to identify and understand advanced and emerging threats
• Work day‑to‑day with security architects, platform engineers, and advanced defensive teams to ensure APT tradecraft, attacker behavior, and AI‑enabled threat scenarios are explicitly reflected in threat models and architectural decisions.
• Translate advanced persistent threat actor tactics, techniques, and attack lifecycles into concrete architectural risks, defensive assumptions, and design constraints for modern enterprise and cloud environments.
• Collaborate closely with technical control owners to map adversary techniques to real control implementations, identifying gaps or misalignment against advanced and adaptive threats.
• Provide intelligence‑driven input into threat modeling exercises, helping teams identify realistic attack paths, trust boundary weaknesses, and high‑impact failure modes.
• Partner with advanced defensive and detection engineering teams to inform control design, detection strategies, and response patterns based on observed and emerging APT behavior.
• Work with security testing teams (e.g., red team, adversary emulation, assurance functions) to ensure testing scenarios and hypotheses are aligned to current and anticipated APT tactics, including AI‑assisted techniques.
• Act as a trusted intelligence advisor during architecture and design reviews, clearly articulating how design choices influence exposure to sophisticated threat actors.
• Continuously assess how new technologies and platforms—including cloud‑native services, automation, and AI systems—change attacker opportunities and threat modeling assumptions.

Senior Threat Intelligence Analyst

Incident Response Analyst

• Perform penetration testing activities
• Supervise, develop, and coach teams
• Manage client service accounts
• Solve and analyze complex problems
• Deliver elevated-quality deliverables
• Lead and execute stealthy penetration testing

Cyber Incident Response Manager

• Triage and investigate security alerts across endpoints, identity systems, cloud environments, and production workloads.
• Support response efforts for a range of security investigations, including account compromise, endpoint activity, and suspicious behavior in cloud, CI/CD, or production systems.
• Collect and analyze relevant data (e.g., logs, system activity) to help scope incidents, identify impacted systems, and track activity across environments.
• Escalate higher-risk or unclear activity, and support senior team members in ongoing investigations.
• Execute containment or remediation actions as directed, and document findings clearly throughout the investigation lifecycle.
• Support vulnerability and posture management efforts by validating findings and helping track remediation activities.

Security Analyst I

• Monitor security information and event management (SIEM) systems and other security tools for suspicious activity.
• Triage and prioritize security alerts and events based on their potential risk and impact.
• Analyze network traffic, log data, and system alerts to identify potential security incidents.
• Follow established incident response playbooks to investigate and contain security incidents.
• Assist senior analysts in the root cause analysis of security breaches and vulnerabilities.
• Help implement remediation steps to address detected security flaws.
• Assist in performing routine vulnerability scans on internal and external systems.
• Analyze scan results, identify false positives, and help prioritize vulnerabilities for remediation.
• Work with IT and development teams to ensure timely patching and security updates.
• Document all security incidents, investigations, and mitigation actions in a timely and accurate manner.
• Help create and update standard operating procedures (SOPs) for security tasks.
• Generate basic security reports on key metrics, such as the number of alerts, incidents, and resolved vulnerabilities.
• Contribute to the development of training materials and participate in security awareness campaigns for employees.
• Help educate colleagues on security best practices, such as phishing prevention and password hygiene.

• Partner with the Authentication team leader and technology SMEs to drive adoption of compliant, enterprise‑wide authentication solutions aligned to IAM standards.
• Monitor industry identity and authentication trends and engage peers to inform and evolve BAC’s security strategy.
• Apply industry best practices, standards, and documentation, recommending improvements based on practical experience.
• Build and maintain strong partnerships across Global Information Security (GIS) functions, Core Technology Infrastructure (CTI), Cyber Security Technology (CST), Third Party management, Global Compliance and Operations Risk (CGOR), internal audit, and regulatory agencies.
• Engage Product Managers and Senior Architects to align with the strategic identity and authentication technology roadmap.
• Collaborate with stakeholders to define identity and authentication requirements supporting long-term modernization across process, data, and technology.
• Influence tool owners to design and implement modern, efficient identity and authentication solutions that deliver sustainable risk reduction.
• Assess identity and authentication risks in business and technology decisions, ensuring compliance with internal policies and external regulatory requirements.
• Take ownership of identity and authentication risk management by proactively identifying issues, strengthening controls, and driving outcomes.
• Partner with IAM Governance leads to ensure that all authentication related IAM requirements are appropriately measured, reported, and governed.
• Actively participate in GIS IAM forums to support standards, controls, and Single Process Inventory (SPI) enhancements.
• Consult with business partners to identify gaps and governance issues and develop effective remediation strategies.
• Provide senior management with timely, transparent reporting on existing and emerging identity and authentication risks.
• Clearly communicate proposed changes through written materials and education sessions for team members and technology partners.
• Partner with policy governance teams to socialize and publish updates to identity and authentication standards.
• Support audit issue remediation, closure, and sustainability.

Identity and Access Management Analyst, Authentication Security

• Analyze complex cybersecurity problems to manage workstreams and develop deliverables
• Guide and mentor junior team members
• Build and sustain meaningful client relationships to drive engagement
• Work with team members to enhance operational effectiveness
• Uphold the firm's ethical standards and compliance requirements
• Analyze data to inform decision-making and improve outcomes

Senior Associate, Cyber Defense – Cyber Incident Response

• Lead and support advanced SOC investigations, incident response activities, and Tier-3 escalations, providing deep technical analysis of security alerts, anomalous behavior, and suspected malicious activity
• Perform proactive threat hunting activities across enterprise security telemetry including SIEM, EDR, identity, network, and cloud logs to identify previously undetected or emerging threats
• Analyze attacker behaviors and intrusion patterns to develop threat hunting hypotheses and detection strategies aligned with the MITRE ATT&CK framework
• Investigate complex security alerts and incidents, performing log analysis, endpoint analysis, and timeline reconstruction to determine root cause, scope, and impact
• Leverage internal telemetry, alerts, and IOC trends to identify threat patterns targeting the organization and opportunities for improved detection coverage
• Enhance threat detection and response capabilities by supporting the development and improvement of SOC detection logic, response procedures, escalation playbooks, and analyst decision trees
• Conduct proactive analysis of alert trends to identify gaps in detection coverage and recommend new or improved monitoring capabilities
• Utilize Cyber Threat Intelligence (CTI) sources to contextualize incidents, inform threat hunting efforts, and prioritize investigations
• Monitor open-source, closed-source, and vendor-provided threat intelligence to stay abreast of emerging threats, vulnerabilities, and adversary tactics relevant to the organization
• Develop and maintain profiles of relevant threat actors, including tactics, techniques, and procedures (TTPs), and incorporate those insights into threat hunting and detection strategies
• Assist in SOC and Incident Response escalations, providing technical expertise and investigative support during security incidents
• Conduct threat, risk, and vulnerability assessments to provide actionable remediation and security control improvement guidance
• Collaborate with the Red Team and Cyber Incident Management to support red team exercises, incident response training, tabletop exercises, and detection validation
• Perform targeted access reviews and anomaly analysis across enterprise systems (Windows, Linux, databases, network infrastructure, cloud platforms) to identify suspicious activity
• Collaborate with DLP and other security teams on insider risk investigations and monitoring initiatives
• Contribute to the development and improvement of SOC procedures, threat hunting methodologies, and intelligence-driven detection processes
• Collaborate with relevant stakeholders on security awareness messaging and threat awareness related communications

See all jobs on JobTailor

IT Security Analyst II

Senior Cyber Security Analyst

Senior Intelligence Analyst – Enterprise & Major Crimes Division

Senior Cybersecurity Analyst – Threat Hunter

Senior Threat Intelligence Analyst

Cyber Incident Response Manager

Security Analyst I

Security Analyst I

Security Analyst I

Identity and Access Management Analyst, Authentication Security

Senior Associate, Cyber Defense – Cyber Incident Response

Senior Cyber Threat Analyst