Security Analyst

Company Description

At EVERSANA, we are proud to be certified as a Great Place to Work across the globe. We’re fueled by our vision to create a healthier world. How? Our global team of more than 7,000 employees is committed to creating and delivering next-generation commercialization services to the life sciences industry. We are grounded in our cultural beliefs and serve more than 650 clients ranging from innovative biotech start-ups to established pharmaceutical companies. Our products, services and solutions help bring innovative therapies to market and support the patients who depend on them. Our jobs, skills and talents are unique, but together we make an impact every day. Join us! 

Across our growing organization, we embrace diversity in backgrounds and experiences. Improving patient lives around the world is a priority, and we need people from all backgrounds and swaths of life to help build the future of the healthcare and the life sciences industry. We believe our people make all the difference in cultivating an inclusive culture that embraces our cultural beliefs.  We are deliberate and self-reflective about the kind of team and culture we are building. We look for team members that are not only strong in their own aptitudes but also who care deeply about EVERSANA, our people, clients and most importantly, the patients we serve.   We are EVERSANA.  

THE POSITION:

We are seeking an experienced Security Analyst with 6+ years of hands-on experience in security monitoring, compliance, and threat detection. The ideal candidate must have strong expertise in Drata, Wiz, Veeza, and Splunk for security monitoring, compliance automation, and risk management. Exposure to KnowBe4 is a plus. 

This role will be responsible for continuous monitoring of security posture, identifying risks, ensuring compliance adherence, and proactively responding to security events.

 

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Our employees are tasked with delivering excellent business results through the efforts of their teams.  These results are achieved by:

• Monitor and manage security alerts and incidents using Drata, Wiz, Veeza, and Splunk. 
• Perform continuous compliance monitoring (SOC 2, ISO 27001, HIPAA, etc.) using Drata. 
• Utilize Wiz for cloud security posture management (CSPM) and vulnerability visibility. 
• Manage access governance, entitlement monitoring, and identity risk using Veeza. 
• Analyze and correlate security logs and events using Splunk SIEM. 
• Investigate security incidents, perform root cause analysis, and recommend remediation actions. 
• Work closely with DevOps, Cloud, and IT teams to remediate vulnerabilities and misconfigurations. 
• Develop dashboards, alerts, and use cases within Splunk. 
• Conduct risk assessments and track remediation plans. 
• Support internal and external audits. 
• (Optional) Manage security awareness campaigns and phishing simulations using KnowBe4.

Qualifications

MINIMUM KNOWLEDGE, SKILLS AND ABILITIES:

The requirements listed below are representative of the experience, education, knowledge, skill and/or abilities required.

• 6+ years of experience in Information Security / Security Operations. 
• Hands-on experience with: • Drata (Compliance automation & audit readiness) 
• Wiz (Cloud security posture management) 
• Veeza (Access governance & identity security) 
• Splunk (SIEM, log analysis, dashboards, alerting) 

• Strong understanding of: • Cloud security (AWS/Azure/GCP) 
• Identity & Access Management (IAM) 
• Security monitoring & incident response 
• Compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR) 

• Experience in vulnerability management and remediation tracking. 
• Ability to analyze logs, correlate events, and identify threats. 
• Strong documentation and reporting skills.

 

PREFERRED QUALIFICATIONS:

• Experience with KnowBe4 (Security awareness & phishing simulation). 
• Certifications such as: • CEH 
• CISSP 
• CISM 
• Splunk Certified Professional 
• CCSP 

• Experience in SaaS or cloud-native environments. 

OUR CULTURAL BELIEFS:

Patient Minded I act with the patient’s best interest in mind.

Client Delight I own every client experience and its impact on results.

Take Action I am empowered and empower others to act now.

Grow Talent I own my development and invest in the development of others. 

Win Together I passionately connect with anyone, anywhere, anytime to achieve results.

Communication Matters I speak up to create transparent, thoughtful and timely dialogue.

Embrace Diversity I create an environment of awareness and respect.

Always Innovate I am bold and creative in everything I do.

Our team is aware of recent fraudulent job offers in the market, misrepresenting EVERSANA. Recruitment fraud is a sophisticated scam commonly perpetrated through online services using fake websites, unsolicited e-mails, or even text messages claiming to be a legitimate company. Some of these scams request personal information and even payment for training or job application fees. Please know EVERSANA would never require personal information nor payment of any kind during the employment process. We respect the personal rights of all candidates looking to explore careers at EVERSANA.

From EVERSANA’s inception, Diversity, Equity & Inclusion have always been key to our success. We are an Equal Opportunity Employer, and our employees are people with different strengths, experiences, and backgrounds who share a passion for improving the lives of patients and leading innovation within the healthcare industry. Diversity not only includes race and gender identity, but also age, disability status, veteran status, sexual orientation, religion, and many other parts of one’s identity. All of our employees’ points of view are key to our success, and inclusion is everyone's responsibility.

Follow us on LinkedIn | Twitter