Jr. Security Incident Response Analyst

ELLKAY started out providing connectivity solutions to laboratories and within a few years, grew to also provide data management solutions to ambulatory organizations. ELLKAY is now a trusted data management partner in five healthcare segments. ELLKAY's solutions continue to serve laboratories and ambulatory practices and have expanded to empower hospitals and health systems, healthcare IT vendors, ambulatory practices, health plans, and other healthcare organizations with cutting-edge technologies and solutions that drive their growth and interoperability strategies.

Today, ELLKAY remains true to our core values, building strong partner relationships and offering unparalleled service and support while providing innovative, scalable solutions to the challenges our customers face in today's data-rich world.

ELLKAY's experience, customer-focused approach, and reputation for innovation, speed, and accuracy differentiate ELLKAY as a premier partner for your interoperability needs and data management strategy.

Job Description

The Junior Security Incident Response Analyst is an entry‑level member of the Security Incident & Threat Response team. Reporting to the Security Incident & Threat Response Lead, this role monitors security alerts, performs initial triage and investigation, and helps execute incident response playbooks to protect the organization's systems and data. The analyst learns on-the-job while supporting more senior responders during active investigations.

Essential Duties & Responsibilities

• Monitor security dashboards and alert queues (SIEM, EDR, cloud security tools, identity logs) and promptly triage incoming alerts.
• Perform basic investigation steps: gather logs, review events, check user and asset context, and determine whether an alert is benign, suspicious, or confirmed malicious.
• Escalate confirmed or complex incidents to the Security Incident & Threat Response Lead or senior engineers with clear, well‑structured notes.
• Help execute incident response playbooks under guidance (e.g., isolate endpoints, disable compromised accounts, collect forensic data, block malicious indicators).
• Document investigation steps, timelines, and outcomes in the incident tracking system.
• Support periodic vulnerability and misconfiguration reviews by helping review scan results and create remediation tickets.
• Participate in incident response exercises and post‑incident reviews; capture lessons learned and update runbooks where appropriate.
• Assist with routine security hygiene tasks such as tuning low‑value alerts, updating watchlists, and maintaining standard operating procedures.
• Stay current on common cyber threats and attacker techniques relevant to the organization's environment.
  
  

Qualifications

• 1–2 years of experience in security operations, IT support with security exposure, or a related technical role (internships or labs acceptable).
• Basic understanding of networking (IP, ports, protocols), operating systems (Windows/Linux), and common security concepts (malware, phishing, brute force, privilege abuse).
• Familiarity with at least one class of security tooling (e.g., SIEM, EDR, IDS/IPS, cloud security logs) from coursework, labs, or prior work.
• Strong analytical and problem‑solving skills and attention to detail when reviewing logs and alerts.
• Clear written communication skills for documenting incidents and handing off investigations.
• Willingness to participate in an on‑call or shift rotation as the team matures.
  
  

Preferred

• Associate or bachelor's degree in cybersecurity, computer science, information systems, or related field; or equivalent hands‑on experience.
• Entry‑level security certification (e.g., Security+, CySA+, SSCP) or actively working toward one.
• Experience with scripting (e.g., Python, PowerShell) for basic automation is a plus.
  
  

Additional Information

ELLKAY is committed to fostering a collaborative and high-performance work environment that supports innovation, teamwork, and professional growth. Most roles are designed to operate from our office locations to encourage effective collaboration and engagement across teams.

Any alternative work arrangements may be considered at the company's discretion based on role requirements and business needs.

For more information about our company, please visit www.ELLKAY.com .

ELLKAY is a Smoke-Free Workplace.

ELLKAY, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.