# Security Analyst – World Trade Center Health Program (WTCHP TPA)

**Company**: GDIT
**Location**: Any Location / Remote
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $85,093 - $115,000
**Category**: Security
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Any-Location--Remote/Security-Analyst_RQ231942?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/security-analyst-world-trade-center-health-program-077431b3-8fb/

## Description

GDIT is seeking a Security Analyst to support day-to-day security operations for the World Trade Center Health Program TPA.

This role strengthens protection of PHI/PII, ensures compliance with NIST 800-53/FISMA Moderate and HIPAA, and supports continuous monitoring across cloud and on-premise environments.

**Responsibilities:**

- Monitor and triage security alerts across SIEM (Splunk), EDR (CrowdStrike), DLP tools, and cloud telemetry.

- Lead or support incident response activities: investigation, containment, eradication, and lessons learned.

- Execute vulnerability management processes including scanning, validation, prioritization, remediation tracking, and reporting.

- Contribute to POA&Ms, SSP updates, audit responses, and control evidence collection.

- Support identity and access governance, least-privilege reviews, and privileged access monitoring.

- Build or refine detection content, playbooks, and automation for common WTCHP security scenarios.

- Partner with engineering, infrastructure, and DevOps teams to embed security into change management processes.

- Maintain runbooks, metrics, and dashboards; report on control health and operational risk.

**Required Qualifications:**

- 3–5 years in security operations or blue-team roles within regulated healthcare or federal environments.

- Hands-on experience with SIEM (Splunk), EDR (CrowdStrike or similar), vulnerability scanners (Tenable/Nessus), and DLP tools.

- Familiarity with NIST 800-53, HIPAA, RMF, log management, and cloud environments (AWS/Azure).

- CompTIA Security+ (required or must be obtained within 6 months).

- Strong analytical, documentation, and communication skills.

- Ability to participate in on-call rotation.

- Ability to obtain and maintain a Public Trust (Moderate Risk) background investigation.

**Preferred Qualifications:**

- Additional certifications such as Splunk User/Power User, AWS/Azure security, CySA+, or CEH.

- Experience with ServiceNow/Jira, SPL/KQL queries, Python/PowerShell scripting, or DLP tuning.

- Exposure to FedRAMP control environments, zero-trust principles, and PHI governance.

The likely salary range for this position is $85,093 - $115,000.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Security Information and Event Management (SIEM)
- Security Operations
- Threat Detection
- NIST 800-53
- HIPAA
- RMF
- log management
- cloud environments (AWS/Azure)
- CompTIA Security+

### Nice to have
- Splunk User/Power User
- AWS/Azure security
- CySA+
- CEH
- ServiceNow/Jira
- SPL/KQL queries
- Python/PowerShell scripting
- DLP tuning

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Any-Location--Remote/Security-Analyst_RQ231942?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)