CareDx is a leading precision medicine diagnostics company advancing care in transplant, specialty oncology, and cell therapy. Through our innovative portfolio of molecular diagnostics, digital health solutions, AI-powered data and analytics, and patient support services, we partner with healthcare providers, patients, and biopharma organizations to help inform clinical decision-making and improve patient outcomes.
At CareDx, every employee has the opportunity to contribute to innovations that help transform patient care and improve lives.
The Cybersecurity Analyst II is responsible for protecting CareDx's information systems, networks, applications, endpoints, and data from cybersecurity threats through operational monitoring, incident response, policy enforcement, security tooling administration, and risk reduction activities.
This role serves as an experienced cybersecurity operations resource responsible for independently monitoring, investigating, analyzing, and responding to cybersecurity events across multiple security platforms including SIEM, EDR, ThreatLocker, DLP, and AI Detect and Response (AIDR) technologies.
The position will play a key role in supporting CareDx's expanding AI security program through monitoring, configuration support, incident analysis, operational governance, and collaboration with AI security vendors to ensure AI technologies are adopted securely without unnecessarily restricting business growth and innovation.
This role requires prior hands-on cybersecurity operations experience and the ability to work across technical, operational, compliance, and business functions.
Key Responsibilities:
- Monitor, configure, and maintain AI Detect and Response (AIDR) tooling to identify and reduce risks associated with organizational AI usage
- Monitor security alerts, logs, dashboards, and telemetry from SIEM, EDR, ThreatLocker, DLP, cloud, and other cybersecurity platforms
- Investigate, triage, and respond to cybersecurity incidents including malware, phishing, unauthorized access, suspicious behavior, policy violations, and potential data exposure events
- Support ThreatLocker operational response activities including application control reviews, policy management, and endpoint troubleshooting
- Analyze DLP alerts and assist with investigations involving sensitive data handling, potential exfiltration events, and policy violations
- Conduct vulnerability analysis and coordinate remediation activities with infrastructure, engineering, and application teams
- Assist with threat hunting, threat modeling, security assessments, and control gap analysis activities
- Participate in incident response activities including containment, investigation, root cause analysis, remediation coordination, and post-incident reporting
- Support security monitoring and operational governance for technologies and emerging threats
- Assist with development and maintenance of cybersecurity operational procedures, standards, and documentation
- Support compliance, audit, and regulatory activities related to frameworks such as NIST, ISO 27001, HIPAA, SOC 2, and SOX
- Stay current on emerging cybersecurity threats, AI security risks, vulnerabilities, attack techniques, and industry best practices
- Collaborate with IT, Engineering, Compliance, Legal, Risk Management, and business stakeholders to strengthen CareDx's security posture
Qualifications:
- Education: High School Diploma or GED required. Associate's or Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field preferred.
- Industry-recognized cybersecurity certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or comparable certifications preferred.
- Experience: 2-3 or more years of cybersecurity, security operations, incident-response, or related IT experience.
- Experience investigating EDR, MDR, endpoint, identity, or email-security alerts.
- Knowledge of Windows, Microsoft 365, Entra ID, endpoint security, and common cyber threats.
- Ability to analyze logs, process activity, authentication records, URLs, IP addresses, and file hashes.
- Strong investigation, documentation, communication, and prioritization skills.
- Experience with ThreatLocker, CrowdStrike, Microsoft Defender, SIEM, or ticketing platforms preferred.
- Security+, CySA+, SC-200, or a similar certification preferred.
Additional Details:
Every individual at CareDx has a direct impact on our collective mission to improve the lives of organ transplant patients worldwide. We believe in taking great care of our people, so they take even greater care of our patients.
Our competitive Total Rewards package for US Employees includes:
- Competitive base salary and incentive compensation
- Health and welfare benefits, including a gym reimbursement program
- 401(k) savings plan match
- Employee Stock Purchase Plan
- Pre-tax commuter benefits
- And more!
- Please refer to our page to view detailed benefits at https://caredx.com/company/careers
In addition, we have a Living Donor Employee Recovery Policy that allows up to 30 days of paid leave annually to a full-time employee who makes the selfless act of donating an organ or bone marrow.
With products that are making a difference in the lives of transplant patients today and a promising pipeline for the future, it's an exciting time to be part of the CareDx team. Join us in partnering with transplant patients to transform our future together.
CareDx, Inc. is an Equal Opportunity Employer-vets/disabled, and participates in the E-Verify program. By proceeding with our application and submitting your information, you acknowledge that you have read our U.S. Personnel Privacy Notice and consent to receive email communication from CareDx. Certain jurisdictions require notice of how we use and protect your personal information. For more information, please read our Privacy Policy
The U.S. EEO posters are available here.
Note: We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us.
#LI-Remote
