Information Security Operations Analyst

About Moda

Founded in Oregon in 1955, Moda is proud to be a company of real people committed to quality. Today, like then, we’re focused on building a better future for healthcare. That starts by offering outstanding coverage to our members, compassionate support to our community and comprehensive benefits to our employees. It keeps going by connecting with neighbors to create healthy spaces and places, together.

Moda values diversity and inclusion in our workplace. We aim to demonstrate our commitment to diversity through all our business practices and invite applications from candidates that share our commitment to this diversity. Our diverse experiences and perspectives help us become a stronger organization. Let’s be better together.

The Operations Analyst is a technical role within Moda’s Information Security team and will play a vital role in keeping the organization’s proprietary and sensitive information secure. This position works interdepartmentally to investigate issues, identify and correct flaws in security systems, solutions, and programs, and recommend measures to improve the company’s overall security posture. Acting as a liaison between Security and IT management, the analyst assists IT strategy and architecture design from a security perspective and identifies issues, concerns, or recommendations as the organization grows its technology infrastructure and processes.

This is a FT WFH position.

$70,496.52 - $91,647.55 annually (depending on experience).
* This role may be classified as hourly (non-exempt) depending on the applicant's location. Actual pay is based on qualifications. Applicants who do not exceed the minimum qualifications will only be eligible for the low end of the pay range.

Please fill out an application on our company page, linked below, to be considered for this position.

(Use the "Apply for this Job" box below).&refresh=true

• 401K
  - Matching
• FSA
• Employee Assistance Program
• PTO and Company Paid Holidays

• Bachelor’s or master’s in Computer Science, Information Security, Cybersecurity, or a related field.
• 5+ years of experience as a security operations analyst or in related fields such as IT audit, enterprise risk management, penetration testing, or red team/incident response.
• Experience with common security tools such as SIEM platforms, EDR solutions, and cloud platforms (e.g., Microsoft Azure, Amazon AWS).
• Knowledge of Microsoft Azure configuration and management is highly desirable.
• 3+ years of experience with regulatory compliance and information security management frameworks (e.g., HIPAA, NIST, IS0 27000, or COBIT).
• Strong documentation and reporting skills, including the ability to record security events, investigations, and recommendations for technical and non-technical audiences.
• Excellent collaboration and communication skills with the ability to influence and work effectively across cross-functional teams.
• Industry recognized cybersecurity certification (e.g., CISSP, CISM, CompTIA Security+) preferred.

• Defend against cybersecurity incidents and identify, analyze, communicate, and contain incidents as they occur.
• Monitor systems and networks for security alerts, notifications, and issues including patching and update process issues and investigate and document any security issues or events that may occur.
• Own and drive the investigation of security events and other cybersecurity incidents including review, triage, and response to alerts and notifications.
• Take a lead role in the documentation of security events and incidents and the assessment of the damage they cause.
• Review threat intelligence and analyze the current threat landscape and apply threat analysis to Moda’s infrastructure systems and networks to identify and address vulnerabilities or exploitable attack paths.
• Build and drive proactive threat hunting programs including detailed threat analysis of exploitable vulnerabilities leading to actionable remediation plans.
• Work with IT resources and architects to develop and implement cloud security strategies to facilitate migration of key assets into a public cloud hosted environment.
• Advise…