{"id":2863109,"url":"https://alion.io/job/mayo-clinic-principal-information-security-analyst","title":"Principal Information Security Analyst","company":{"id":35609,"name":"Mayo Clinic","domain":"mayoclinic.org","url":"https://alion.io/company/mayo-clinic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":90,"open_postings":102,"ghost_share":0,"stale_share":0.578,"repost_share":0.039,"time_to_fill_p50_days":4,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rochester, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":109000,"max_usd":226000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":398},"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-10-19T13:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-20T12:03:57Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"The Principal Information Security Analyst serves as a senior leader within the Cybersecurity Threat Intelligence team and is accountable for advancing the team's capabilities, maturity, and impact. In addition to delivering complex individual work, the role establishes direction, develops repeatable intelligence practices, mentors and influences others, and drives the integration of intelligence into Cyber Defense and enterprise decision-making.\nThe analyst independently identifies, collects, validates, analyzes, and disseminates intelligence from government, law-enforcement, industry, commercial, open-source, dark web, and internal sources. The role complements the team's cybersecurity expertise by expanding its ability to develop Mayo-specific intelligence rather than relying primarily on externally produced threat reporting.\nThis position connects cyber, physical, operational, reputational, insider, research, executive, and business risks and translates those connections into decision-relevant intelligence for Cyber Defense and the enterprise.\nPrimary Responsibilities:\nCapability Leadership and Program Maturity\nSet direction for enterprise threat intelligence capabilities and translate strategic priorities into an actionable intelligence roadmap.\nDrive maturity by establishing standards, methods, repeatable workflows, feedback mechanisms, and measures that improve the quality, consistency, timeliness, and operational value of intelligence.\nLead complex and ambiguous intelligence initiatives requiring coordination across Cyber Defense, security, risk, investigative, technical, and business functions.\nMentor analysts, share tradecraft, and strengthen team capabilities in structured analysis, OSINT, enterprise intelligence, government engagement, and executive communication.\nInfluence priorities without relying on formal authority, identify capability gaps, recommend investments and partnerships, and serve as a senior advisor across the enterprise.\nIntelligence Requirements, Collection and Analysis\nDevelop and maintain intelligence requirements aligned with Mayo Clinic priorities and the operational needs of Cyber Defense and enterprise stakeholders.\nIdentify, collect, validate, and analyze information from government, law-enforcement, industry, commercial, open-source, dark web, and internal sources.\nProduce actionable intelligence concerning threat actors, campaigns, malware, vulnerabilities, tactics, techniques, procedures, and emerging risks.\nConduct adversary profiling and threat actor research using MITRE ATT&CK and other relevant intelligence frameworks.\nApply structured analytic techniques, link analysis, metadata analysis, infrastructure analysis, geolocation, and digital-footprint research to complex intelligence questions.\nDevelop strategic, operational, and tactical assessments tailored to Mayo Clinic, including threats affecting healthcare delivery, research, executives, personnel, and critical operations.\nIntelligence Production and Cyber Defense Enablement\nProduce recurring intelligence reports, threat assessments, executive briefings, investigative products, and time-sensitive operational intelligence.\nTranslate intelligence findings into clear implications and recommended actions for Threat Hunting, Detection Engineering, Security Validation, Incident Response, Red Team, and other Cyber Defense functions.\nDevelop Mayo-specific intelligence by connecting information from multiple sources, identifying relevant patterns, and converting fragmented information into actionable assessments.\nSupport threat actor attribution, campaign tracking, trend analysis, intelligence-led hunting, detection development, validation activities, and complex cyber investigations.\nAssess the operational relevance of commercial and partner-provided intelligence and enrich it with enterprise context.\nOSINT and Investigations\nConduct advanced OSINT investigations using public, commercial, and specialized intelligence resources.\nResearch threat activity across the surface web, social media, underground forums, dark web, digital infrastructure, and other relevant environments.\nInvestigate cyber-enabled fraud, threats to personnel, insider threats, reputational risks, intellectual-property concerns, cyber-enabled physical threats, and emerging threat activity.\nDevelop investigative intelligence that supports Cyber Defense, Security Operations, Enterprise Risk, Executive Protection, Research Security, and other enterprise partners.\nPreserve analytical objectivity, source integrity, and appropriate handling practices when collecting and disseminating sensitive intelligence.\nGovernment, Law-Enforcement, and Industry Engagement\nEstablish, maintain, and leverage trusted relationships with federal, state, and local government, law-enforcement, intelligence, healthcare-sector, and information-sharing partners to improve Mayo Clinic's access to relevant threat information and collaborative expertise.\nRepresent Cybersecurity Threat Intelligence in intelligence exchanges, working groups, briefings, and partner engagements.\nCoordinate intelligence activities with government agencies, law enforcement, industry partners, information-sharing organizations, and external intelligence providers.\nFacilitate timely two-way intelligence sharing during significant cyber incidents, investigations, or threat events.\nTranslate externally sourced intelligence into Mayo Clinic-specific risk context and operational actions.\nEnterprise Intelligence Integration\nIdentify intersections among cyber, operational, physical, reputational, executive, research, and business risks and translate them into intelligence relevant to enterprise stakeholders.\nBuild effective working relationships across Cyber Defense, Security Operations, Enterprise Risk, Executive Protection, Research Security, Legal, Compliance, and other business and security functions to coordinate intelligence collection, analysis, and dissemination.\nImprove awareness of intelligence activities occurring across Mayo Clinic, identify opportunities for collaboration, and reduce unnecessary duplication of effort.\nCommunicate intelligence fluidly to technical, operational, executive, and nontechnical audiences.\nSupport leadership through decision-relevant intelligence briefings and risk assessments and serve as a trusted advisor on emerging threats and security trends.\nThis vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.\n Bachelor’s degree in applicable field plus eight (8) years of relevant experience.\nPertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field.\nOR\nMaster’s degree in applicable field plus five (5) years of relevant experience. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field.\nOne or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP.","description_format":"text","description_chars":7207,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hospitals & Health Systems","Information Security","Research Institutes","Medical Education & Training"],"lifecycle":[{"event":"open","at":"2026-10-19T16:51:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 479 · green card filings: 4","filings_12m":479,"filings_prev_12m":557,"green_card_filings_12m":4,"median_offered_wage_usd":89115,"route":null,"cap_exempt":true,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0},{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-20T06:21:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":4,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/mayo-clinic-principal-information-security-analyst","json_url":"https://alion.io/job/mayo-clinic-principal-information-security-analyst.json","meta":{"generated_at":"2026-10-21T01:12:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1846,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":35609},"rest":"https://alion.io/mcp/rest/get_company?id=35609"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmayo-clinic-principal-information-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmayo-clinic-principal-information-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmayo-clinic-principal-information-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mayo-clinic-principal-information-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmayo-clinic-principal-information-security-analyst"}]}