L3 Security Incident Response Analyst

The L3 Security Incident Response Analyst is a technical investigator on the Security Operations team responsible for managing security incidents from scoping through containment, eradication, and recovery. This role serves as the escalation point for junior analysts, makes critical containment decisions under pressure, and drives detection and process improvements to prevent future incidents. The position involves handling high-severity investigations involving PHI/PII, identity compromise, and third-party exposures in a regulated healthcare environment.