SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Abby Care is building an AI-native platform for family-led care, partnering with health plans and government organizations to help families deliver high-quality care at home. The company combines clinical oversight with AI-powered tools to train, enable, and support family caregivers while improving transparency and outcomes across the healthcare system.
As Senior Security Analyst reporting to the Director of IT, Information & Security, you will lead security operations and strengthen the organization's threat detection and risk management program. This is a full-time remote role based in the United States with expectation to work PST hours.
Key responsibilities include:
**Security Operations & Incident Response:** Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR (SentinelOne), and cloud security tooling. Develop and maintain incident response playbooks, runbooks, and tabletop exercises.
**Vulnerability & Risk Management:** Own the vulnerability management lifecycle, partnering with IT and Engineering to remediate scan, pen test, and audit findings. Maintain the risk register, conduct third-party/vendor risk assessments, and communicate technical risks to business stakeholders.
**Identity, Endpoint & Compliance Oversight:** Partner with IT to audit and enforce security controls across Okta (RBAC/MFA), Google Workspace (DLP/logs), JAMF, and SentinelOne. Drive evidence collection and remediation for compliance audits (SOC 2, ISO 27001, HIPAA, PCI DSS) while aligning policies with NIST CSF and CIS frameworks.
**Security Engineering & Automation:** Automate detection, response, and reporting workflows via SOAR, scripting, and APIs to improve alert quality and efficiency. Mentor team members and contribute to cross-functional security knowledge sharing.
**AI Security & Governance:** Establish guardrails and acceptable-use policies for enterprise AI tools (e.g., GenAI, Claude), mitigating shadow AI, data leakage, and third-party vendor risks. Partner with Product and Engineering to assess and remediate AI/LLM-specific vulnerabilities, including prompt injection, model abuse, and data exposure. Pilot and evaluate AI-powered security capabilities to boost response speed and operational efficiency.
**Requirements:**
- 8+ years of experience in security operations, leading incident response end-to-end from detection through remediation
- Associate's or Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field, or equivalent practical experience
- Prior experience working in healthcare or health tech industry, with understanding of industry-specific security and data privacy requirements (e.g., HIPAA)
- Hands-on experience with SIEMs, EDR/XDR (e.g., SentinelOne), vulnerability scanners, cloud security, and core IAM concepts (SSO, MFA, RBAC)
- Working knowledge of security frameworks (SOC 2, ISO 27001, NIST, CIS) with strong analytical skills to translate technical risk to business stakeholders
- Familiarity with emerging AI/LLM risks and interest in evaluating AI capabilities for security use cases
- Excellent communication skills with ability to prioritize competing incidents and operate calmly under pressure
**Nice to have:**
- Hands-on experience with Okta, JAMF, or Google Workspace, alongside Infrastructure as Code (Terraform) for access/security policy management
- Scripting experience (Python, Bash), SOAR exposure, and familiarity with CSPM tools or native cloud security platforms (AWS/GCP/Azure)
- Practical experience securing AI/ML pipelines and GenAI deployments, or operating AI-driven security tools
- Relevant credentials such as CISSP, GCIH, GCIA, OSCP, or Security+
