Security Analyst II

Security Analyst II

Garner’s mission is to transform the healthcare economy, delivering high-quality and affordable care for all. We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures. Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale.

About the role:

We are seeking a Security Analyst to join our Security team. This role is critical to maintaining the security of our app and the infrastructure that supports it. You will be responsible for identifying and mitigating risks across our environment, ensuring that Garner’s security posture remains robust and that our commitment to protecting member data is never compromised.

Where you will work:

Garner is headquartered in NYC, but this position is available for individuals who are comfortable with remote work and occasional travel to HQ.

What you will do:

• Independently manage day-to-day security operations (SecOps/SOC), including threat monitoring and incident triage with intense urgency.
• Conduct systematic reviews of system logs and alerts using Wiz and Datadog to uncover root causes and solve for underlying vulnerabilities.
• Use LLMs (like Claude) to interrogate the health of services and automate security-based data analytics at scale.
• Navigate hundreds of Kubernetes clusters and disparate data sources to find the "signal in the noise" using SQL and Boolean logic.
• Build and implement security controls and automated responses within the AWS ecosystem using Python, Go, or TypeScript.
• Convey technical findings and forensic research concisely to engineering and product teams with clear, actionable remediation steps.
• Own the execution of recurring compliance tasks and documentation, ensuring all security deliverables are error-free and meet regulatory standards.
• Identify opportunities to automate manual security checks, moving the team toward