The Tier 2 Cyber Security Analyst monitors, analyzes, and investigates security alerts and cyber incidents across the enterprise technology environment. This role involves incident triage, threat hunting, and supporting SOC operations while mentoring junior analysts and contributing to security reporting and complia...
Full description
Job Description
Security Analyst
Annual Compensation: $100,000 - $105,000 DOE
Location: Remote
Salary Range $100000K-$105000K Range
Our mission of providing care to the world at a moment's notice is at the heart of everything we do. We are caregivers, first and foremost and we will be there when you need us.
With more than 38,000 employees, Global Medical Response teams deliver compassionate, quality medical care, primarily in the areas of emergency and patient relocation services around the world. We provide end-to-end medical transportation as well as fire services, integrated healthcare solutions and disaster response.
JOB SUMMARY
The Tier 2 Cyber Security Analyst will support information security operations across GMR and its subsidiaries by monitoring, analyzing, and investigating security alerts, cyber incidents, and suspicious activity across the enterprise technology environment. This role is expected to independently perform incident triage, determine scope and urgency, document findings, coordinate response actions, and escalate complex or high-impact issues when appropriate. The analyst will contribute to threat hunting, incident response, security reporting, standard operating procedures, risk and compliance activities, security awareness efforts, and continuous improvement of SOC processes. In addition, this role serves as a developing resource within the SOC by helping guide less experienced analysts, supporting operational maturity initiatives, and contributing to the continuous improvement of detection and response capabilities. This position is ideal for a security professional with practical SOC or IT security experience who can balance independent analysis with team collaboration while helping strengthen GMR's security posture and supporting the organization's mission of providing care at a moment's notice.
ESSENTIAL FUNCTIONS/DUTIES
Monitor and review security event logs, alerts, and dashboards to identify suspicious activity, policy violations, and potential security incidents.
Perform cyber incident triage, including determining scope, urgency, potential impact, affected systems or users, and appropriate containment or escalation actions.
Investigate security alerts and incidents through resolution, including evidence gathering, ticket documentation, response coordination, and follow-up activities.
Participate in after-hours on-call rotation to provide security support across the GMR technology environment as needed.
Support SOC activities during major cyber incidents by analyzing alerts, routing tickets, coordinating with technical teams, and providing timely status updates.
Conduct threat hunting activities to identify potential information security events, misuse, indicators of compromise, and emerging threats before incidents escalate.
Serve as an operational point of contact for information security operations issues and provide guidance to junior analysts while escalating complex matters to senior analysts, engineers, or leadership as appropriate.
Prepare clear incident reports, investigation notes, metrics, and documentation to support response activities and leadership visibility.
Develop, maintain, and improve standard operating procedures, playbooks, operational workflows, and processes that enhance SOC effectiveness and incident response consistency.
Assist with risk management, audit, compliance, and evidence-gathering activities related to security operations.
Promote security awareness by providing practical guidance to employees and supporting a culture of strong security across the organization.
Identify and report security control gaps, monitoring limitations, recurring issues, and opportunities to improve detection and response capabilities.
Collaborate with Operations, Systems Engineers, System Administrators, Network Engineers, IT Security, and Compliance teams to support secure operations across the GMR technology footprint.
Maintain and apply knowledge of current security trends, threat landscape changes, and tactics, techniques, and procedures used by malicious actors.
QUALIFICATIONS
Experience/Education/Licensing/Certification:
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred; equivalent combination of education, certification, and practical IT or security experience may be considered.
Two or more years of experience in cybersecurity, security operations, incident response, IT operations, help desk, network administration, systems administration, or a related technical role required
Security+, Network+, CySA+, GCIH, GCIA, Microsoft security certifications, or similar security certification preferred.
Working knowledge of cybersecurity concepts, including phishing, malware, endpoint protection, access control, vulnerability management, network security, logging, monitoring, and incident response.
Ability to independently analyze alerts, follow documented procedures, document findings, recommend next steps, and escalate complex issues appropriately.
Strong analytical, troubleshooting, and problem-solving skills with attention to detail and the ability to recognize patterns or recurring security issues.
Excellent oral and written communication skills, including the ability to summarize technical issues, incident details, and recommended actions clearly and professionally.
Experience using or supporting IT ticketing systems, SIEM or log review tools, endpoint detection and response platforms, email security tools, vulnerability management tools, or other security monitoring technologies preferred.
Ability to work independently on assigned investigations while collaborating effectively with SOC team members, IT operations, system administrators, network engineers, and security/compliance partners.
Ability to manage multiple priorities in a dynamic SOC environment and make sound decisions with guidance from senior analysts or leadership when needed.
Familiarity with healthcare data protection requirements and industry standards such as HIPAA, PCI, NIST, CIS, or other applicable security frameworks preferred.
Demonstrated ability to operate independently, mentor less experienced analysts, and contribute to the ongoing improvement of SOC processes and operational effectiveness.
Demonstrated commitment to continuous learning, professional development, cybersecurity certification advancement, and staying current on emerging security threats and defensive practices.
To learn more about GMR and how our values are at the core of our services and vital to how we approach care, visit www.GlobalMedicalResponse.com.
EEO Statement
Global Medical Response and its family of companies are an Equal Opportunity Employer, which includes supporting veterans and providing reasonable accommodations for individuals with a disability.
More Information about this Job
Salary Range $100K-$105K Range
Check out our careers site Benefits | GMR Careers to learn more about our comprehensive benefit options, which include medical, vision, dental, 401k, disability, FSA, HSA, EAP, vacation and paid time off.
The application window for this position is anticipated to close on 9.6.2026
.
Company information
With nearly 35,000 team members, Global Medical Response teams deliver compassionate, quality medical care, primarily in the areas of emergency and patient relocation services in the United States, including the District of Columbia and around the world. GMR was formed by combining the industry leaders in air and ground emergency medical services. Each of our companies have long histories of proudly serving the communities where we live: American Medical Response (AMR), Air Evac Lifeteam, REACH Air Medical Services, Med-Trans Corporation, AirMed International and Guardian Flight.
