IT Security Analyst

As an IT Security Analyst at Lark Health, your responsibilities include leveraging security tools to identify vulnerabilities, enhancing in-house security capabilities, managing and reviewing Lark's physical assets, and ensuring vendor compliance through assessments and audits. Additionally, you’ll support IT, Security, and Compliance team initiatives while organizing security documentation and training personnel.

To be considered for the IT Security Analyst position at Lark Health, candidates should have 1-3 years of experience in IT or security, or relevant education or certifications. Proficiency in system administration, access management, and endpoint protection tools are essential, along with familiarity with AWS services such as IAM, EC2, and S3. A proactive mindset and eagerness to learn are also highly valued.

An IT Security Analyst at Lark Health should be familiar with tools for vulnerability/patch management, logging/alerting, and incident handling. Knowledge of Jira, Confluence, as well as various AWS services like CloudTrail and Cloudwatch, is critical. Experience with operating systems such as Windows, macOS, and Linux will also be beneficial.

The ideal IT Security Analyst at Lark Health demonstrates strong organizational and project management skills, alongside a deep understanding of security best practices. An inquisitive nature, a strong desire to learn, and a collaborative spirit in working with cross-functional teams are also key attributes for success in this role.

Yes, Lark Health operates as a remote organization, allowing employees to work from anywhere within the United States. This flexibility can create a great work-life balance while contributing to our mission of improving healthcare access and quality through innovative technology.

In answering this question, detail your familiarity with vulnerability scanning tools, such as SAST, DAST, or IAST tools. Highlight your process for assessing security risks, such as conducting regular assessments and engaging with the engineering team to patch vulnerabilities.

When addressing this question, consider sharing specific scenarios in which you successfully managed security incidents. Emphasize your ability to assess the incident, coordinate a response team, and communicate effectively with stakeholders to mitigate risks.

Discuss your hands-on experience with AWS services like IAM, VPC, and CloudTrail. Provide examples of how you’ve utilized these services to enhance security measures and address vulnerabilities, showcasing your technical skills and understanding of cloud security.

To respond effectively, mention sustainable methods such as following industry-leading blogs, participating in webinars, and attending security conferences. Highlight any memberships in cybersecurity organizations or relevant courses you pursue to continuously improve your knowledge.

Highlight the importance of documentation in you role as an IT Security Analyst by discussing its necessity in creating clear policies, procedures, and training materials. Explain how good documentation can facilitate compliance readiness and security assurance within the organization.

Discuss your approach to collaboration, emphasizing clear communication and project management practices. Provide examples of previous experiences working with cross-functional teams to implement security initiatives effectively.

You could touch on strategies such as regular software updates, inventory management of assets, and automated scanning tools. Explain how you prioritize patches based on risk assessment while keeping security measures efficient.

Outline your familiarity with specific tools you’ve used, including Kandji or similar mobile device management solutions. Use this opportunity to showcase your practical experience in administering and protecting mobile and endpoint devices in a corporate environment.

Relay your intrinsic motivation and interest in protecting data. Share personal stories or pivotal moments that led you toward a career in IT security and how they drive you to keep updated with industry developments.

In your answer, convey the importance of having an established process for vendor assessments. Discuss how you would communicate the compliance issue with relevant stakeholders, develop a remediation plan, and reassess the vendor's capabilities before future engagement.