Marathon Health is a leading provider of advanced primary care in the U.S., serving 2.5 million eligible patients through approximately 630 employer and union-sponsored clients. Our comprehensive services include advanced primary care, mental health, occupational health, musculoskeletal, and pharmacy services, delivered through our 680+ health centers across 41 states. We also offer virtual primary care and mental health services accessible in all 50 states. Transforming healthcare delivery with a patient-first approach, we prioritize convenient access to both in-person and virtual care, resulting in improved health outcomes and significant cost savings. Committed to inclusivity and collaboration, we foster a positive work environment and recruit exceptional talent to ensure expertise and compassion in healthcare delivery. Marathon has been recognized as a five-time Modern Healthcare Best Places to Work in Healthcare winner and a six-time Best in KLAS award winner for employer-sponsored healthcare services.

ABOUT THE JOB

The Security Analyst works closely with SOC to ensure efficient response to security tickets and incident response. Daily threat hunting and identifying potential vulnerabilities in company systems and processes. The individual in this role works closely with the Senior Security Analyst to drive security initiatives and security program maturity.

ESSENTIAL DUTIES & RESPONSIBILITIES

• Configure and optimize security tools and software.
• Review daily and historical data to identify, report, and remedy vulnerabilities.
• Document, prioritize, and analyze security threats, incidents, and key metrics.
• Regular review of security logs, reports, and other information from both internal and external sources to identify and manage security risks and issues.
• Evaluate security controls of proposed vendor products and service providers.
• HITRUST, SOC2, PCI DSS assessment, remediation, documentation, and certification activities.
• Assist in design and execution of security related training programs and communications.
• Verify and monitor that laptops and other devices have the appropriate security tools installed, operating, and updated.
• Investigate, document, and remedy security events.
• Create and manage Incident Response playbooks and IT Security Procedures.

• Root Cause Analysis

• Collaborate with cross-functional teams, including Technology, Operations, Legal, Privacy, Finance, and HR, regarding security.
• Stay informed on emerging technologies and services to ensure Marathon maintains its competitive technical advantage.

QUALIFICATIONS

Bachelor’s degree in computer science, Information Technology, Cybersecurity, Data Science or a related field and 1-3 years combined experience in broader IT and Security roles or equivalent combination of education and experience. Security certifications related to job responsibilities are highly desirable (e.g. Sec+, CEH, CASP, CISSP).

DESIRED ATTRIBUTES

• Hands on experience with security event triage, Windows OS, networking, SIEM, Incident Response, Server and endpoint hardening, application security best practices.
• Specific experience with Microsoft Defender, Cisco, Meraki, Dell laptops, AWS, Salesforce, Microsoft 365, Smartsheet, and PowerShell is highly desired.
• Working knowledge of privacy and security standards (e.g., HIPAA, HITRUST, NIST).
• Creative problem-solving skills and experience investigating suspicious activities.
• Exceptional written and verbal communication skills, with the ability to engage and collaborate across all levels of the organization. Demonstrated capacity to translate technical security events into clear, non-technical language for diverse audiences.
• Curious and willing to learn new skills through self-improvement.
• Collaborative mindset, with the ability to work effectively across diverse teams and stakeholders, fostering strong relationships and alignment.
• Proficiency with Microsoft Office tools, particularly strong expertise in Excel, for data analysis, reporting, and compliance.

Pay Range: $75,000 - $90,000/yr

The actual offer may vary dependent upon geographic location and the candidate’s years of experience and/or skill level.

We are accepting applications for this position until a candidate has been selected. To apply to this position and learn more about open jobs at Marathon Health, visit our careers page.

Marathon Benefits Summary

We believe in empowering teammates to do their best work and build better healthcare. Below are some of our benefit offerings. Eligibility is based on 24/hr week.

• Health and Well-Being: Free Marathon membership for in person and virtual care, employer paid life and disability insurance, and choice in medical/dental plans, vision, employer funded HSA, FSA, and voluntary illness, accident and hospitalization plans. Benefits are effective on the first of the month following date of hire.
• Financial Support: Competitive compensation, 401k match, access to financial coaching through our Employee Assistance Program
• Lifestyle: Paid time off for vacation, sick leave, and more, holiday schedule