Information Security Analyst II

Must be located near Atlanta, GA as this will be a hybrid position

As the Information Security Analyst II at PT Solutions, you will be a mid-level cybersecurity professional responsible for supporting the operation and continuous improvement of PT Solutions’ information security program. The role independently manages assigned security responsibilities, supports risk reduction efforts, and collaborates across the organization to help protect PT Solutions’ systems, data, and business operations. Strong ownership, sound judgment, adaptability, and effective communication are essential to success in this role. You will be responsible for: 

Security Operations, Monitoring & Response

• Independently monitor, investigate, and respond to security events across enterprise technologies and security platforms, determining severity, business impact, and appropriate response.
• Perform advanced analysis and correlation of security data to identify malicious activity, policy violations, control gaps, and other potential risks.
• Collaborate with internal teams, managed security providers, and vendors to improve detection, escalation, response, automation, and overall security operations.
• Identify opportunities to improve, automate, orchestrate, and scale security processes and controls as PT Solutions' technology environment, business operations, and threat landscape evolve.

Incident Response & Investigations

• Lead or materially support response to moderate-to-complex security incidents and investigations, including coordination of containment, remediation, recovery, and evidence-preservation activities.
• Document investigation timelines, evidence, findings, impact, actions taken, root cause, and lessons learned in a manner appropriate for leadership, Legal, HR, Compliance, or audit review.
• Immediately escalate high-severity, business-critical, or time-sensitive incidents and maintain clear communications through closure.

Vulnerability, Exposure & Control Validation

• Support vulnerability and exposure management activities by validating risk, prioritizing remediation, coordinating with system owners, and verifying closure of high-risk vulnerabilities and control gaps.
• Support security assessments, remediation workflows, penetration testing, control validation, and related evidence collection.
• Evaluate the effectiveness of security controls across enterprise technologies and drive documented exceptions or deficiencies toward resolution.

Identity, Data & Cloud Security

• Investigate identity, access, data, SaaS, and cloud security anomalies across enterprise platforms and security technologies.
• Support identity governance, privileged access, access reviews, authentication controls, and account lifecycle-management activities.
• Apply identity-centric, least-privilege, and Zero Trust principles when supporting security controls and technology decisions.
• Monitor and respond to security events involving confidential, sensitive, or regulated information, including PHI, PII, and PCI data.

Security Assurance, Risk & Compliance

•  Collect, validate, organize, and retain security evidence supporting regulatory, contractual, audit, customer, and internal assurance activities.
• Support security risk assessments, third-party and vendor security reviews, remediation tracking, and communication of findings in clear business-risk terms.
• Maintain repeatable procedures, playbooks, investigation records, evidence packages, and control documentation that support consistent and auditable security operations.

Security Awareness & Human Risk

• Support the investigation and response to user-reported security concerns, phishing, impersonation, and other human-targeted threats.
• Support security awareness activities, simulations, metrics, trend analysis, and follow-up actions designed to reduce user-related risk.

Ownership, Communication & Team Support

• Own assigned work through completion, proactively research issues, engage appropriate internal or external resources, and escalate blockers or risks in a timely manner.
• Balance incident-response priorities with recurring operational responsibilities, deadlines, and service expectations in a fast-paced environment.
• Provide concise, outcome-based updates that clearly communicate completed work, current risk, blockers, decisions needed, and next steps.
• Provide guidance and mentoring to other team members in security operations, investigations, evidence collection, documentation, and repeatable procedures.
• Participate in after-hours incident response or escalation support when required by business need.

Other Duties and Operational Support

• Perform other duties, responsibilities, security reviews, investigations, projects, and operational support activities as assigned or reasonably required to support PT Solutions business, technology, compliance, and information security objectives.
• Provide security support for new technologies, integrations, acquisitions, business initiatives, and organizational changes, including identifying security considerations and assisting with the implementation of appropriate controls.

Required Skills & Abilities

• Strong incident-response, investigation, and evidence-handling skills with the ability to independently manage moderate-complexity security events and assigned security responsibilities.
• Strong working knowledge of SIEM/SOC operations, EDR, email security, identity security, cloud security, and data-security monitoring.
• Ability to perform advanced log analysis and correlate events across endpoint, identity, email, network, SaaS, and cloud telemetry.
• Working knowledge of Microsoft 365, Entra ID, Windows security, networking concepts, authentication protocols, and common attacker techniques.
• Working knowledge of cloud and SaaS security concepts, identity-centric security, least privilege, Zero Trust principles, and the security considerations associated with modern enterprise platforms and integrations.
• Familiarity with vulnerability management, patch/remediation workflows, CVE/CVSS concepts, CISA KEV, and risk-based prioritization.
• Ability to assess technical risk and communicate findings clearly to technical teams, leadership, and non-technical stakeholders.
• Ability to create clear, repeatable SOPs, investigation notes, executive summaries, and audit-ready evidence.
• Demonstrated ability to prioritize competing responsibilities, manage deadlines, and work successfully in a fast-paced, distributed environment.
• Demonstrated ownership, initiative, sound judgment, and willingness to proactively resolve blockers and escalate when risk or business impact requires it.
• Working knowledge of healthcare data-security considerations, including PHI/HIPAA and PCI-related requirements.
• Familiarity with security automation, orchestration, and scripting concepts, including tools such as PowerShell, for investigation, response, data collection, control validation, and task optimization.
• Experience with enterprise security technologies across areas such as SIEM/SOC operations, endpoint security, email security, identity security, data security, vulnerability management, SaaS, and cloud platforms.
• Knowledge of artificial intelligence (AI) fundamentals, including generative AI concepts, appropriate enterprise use, data protection considerations, security risks, prompt/data handling, and responsible use of AI-enabled tools.
• Ability to evaluate emerging technologies and changing business requirements from a security perspective and adapt security practices as the organization, technology landscape, and threat environment evolve.

Required Credentials

• Associate degree in Information Technology, Cybersecurity, Computer Science, or a related field required; bachelor's degree preferred. Equivalent relevant experience may be considered in accordance with PT Solutions hiring practices.
• 3-5 years of relevant cybersecurity operations, SOC, incident response, security engineering support, or similar experience.
• One or more relevant certifications preferred, such as Security+, CySA+, GCIH, SC-200, AZ-500, CCNA Cybersecurity, GCIA, Cloud+, PenTest+, or comparable industry certifications.

At PT Solutions, our benefits are designed to support you at every step, both personally and professionally. From comprehensive medical, dental, vision, life and disability insurance to 401(k), PTO plan and more, you’ll have the resources to thrive, plus access to mentorship and professional development opportunities nationwide, empowering our employees to reach higher, grow as leaders, and further their careers. It’s all part of creating an environment where people feel unstoppable. We also offer reimbursement for race and endurance event entry fees up to 5 times per year!

A Top Workplace

At PT Solutions, we’re more than colleagues; we’re a tight-knit community united in our mission to expand access to quality care. Our commitment to you is evident in our industry-leading professional development opportunities. From ongoing evidence-based clinical education to dedicated mentorship opportunities and an APTA-accredited Orthopedic Residency Program, we propel our clinicians toward excellence in physical therapy, occupational therapy, speech-language pathology, and athletic training. 

PT Solutions has been named a 2026 USA Today Top Workplace for the fifth consecutive year, based entirely on employee feedback. We’ve also earned five Culture Excellence Awards for Innovation, Professional Development, Work-Life Flexibility, Appreciation, and Purpose & Values. This recognition reflects a culture built around supporting our people. It’s not just what we do, but how we make people feel. Through human connection, intentional care, and being all in for one another, we create experiences that make a difference. Because together, we do great better.

Let’s go further together and transform care. Join the #PTSLife today!  To see what #PTSLife is like, visit Instagram, Facebook, and LinkedIn. 

We are an equal opportunity employer and welcome all qualified candidates to apply!