Senior Security Analyst
Abby Care · Remote · San Francisco ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Analyst
- Fully remote (US)
- PST hours required
- Healthcare industry
- AI security focus
Abby Care builds an AI-powered platform that supports family caregivers and partners with health plans to improve home care outcomes. The security team protects clinical data and ensures compliance across healthcare systems.
As a Senior Security Analyst, you will manage threat detection, incident response, and risk assessments. You will also define security guardrails for generative AI usage and mentor junior team members.
What you'll do
- Lead end-to-end incident response, threat hunting, and root cause analysis
- Develop and maintain incident response playbooks and runbooks
- Manage vulnerability lifecycle and remediate scan or audit findings
- Conduct third-party vendor risk assessments and maintain risk register
- Audit security controls for Okta, Google Workspace, JAMF, and SentinelOne
- Drive evidence collection for SOC 2, ISO 27001, HIPAA, and PCI DSS audits
- Automate detection and response workflows using SOAR and scripting
- Establish guardrails and policies for enterprise AI tool usage
- Assess and remediate AI-specific vulnerabilities like prompt injection
What you'll need
- 8+ years in security operations and incident response
- Degree in Computer Science, Cybersecurity, or equivalent experience
- Experience in healthcare or health tech with HIPAA knowledge
- Hands-on experience with SIEMs, EDR/XDR, and vulnerability scanners
- Knowledge of IAM concepts including SSO, MFA, and RBAC
- Familiarity with SOC 2, ISO 27001, NIST, and CIS frameworks
- Understanding of emerging AI/LLM risks and security use cases
- Strong communication skills and ability to prioritize under pressure
Nice to have
- Experience with Okta, JAMF, or Google Workspace administration
- Scripting skills in Python or Bash and SOAR exposure
- Familiarity with CSPM tools or native cloud security platforms
- Experience securing AI/ML pipelines or GenAI deployments
- Certifications such as CISSP, GCIH, GCIA, OSCP, or Security+
Stack
- SentinelOne
- Okta
- Google Workspace
- JAMF
- SIEM
- SOAR
- Terraform
- Python
- Bash
How you'll work
- Full-time employment
- Fully remote within the United States
- Must work Pacific Standard Time hours
What you get
- Competitive compensation packages
- Medical, dental, and vision coverage options
- $0 deductible PPO and company-funded HSA
- Employer-paid life and disability insurance
- Generous paid time off and 10 paid holidays
- HSA contributions and optional FSA
- Commuter benefits available
- Full coverage of 401(k) account fees
- Up to 10 weeks paid parental leave