Security Operations (SOC) Analyst II

Bluu Kazi is recruiting security operations analysts for HIPAA-regulated healthcare organizations in Greater St. Louis. These teams protect sensitive health information with lean in-house IT staff and managed security partners, so the analyst is the in-house eyes on security every day. You will be the security operations lead in practice, with direct access to leadership and a clear path toward a senior or security-engineering role.

• Monitor, triage and investigate alerts from the managed detection and response (MDR) partner, Microsoft Defender and Microsoft Entra ID.

• Own incident response from first alert to closure: contain, document and report, including input to HIPAA breach assessments.

• Run vulnerability management: review scans, prioritize fixes by risk to protected health information, and track remediation with IT partners.

• Watch identity and access: suspicious sign-ins, MFA gaps, privileged accounts, and joiner, mover and leaver changes.

• Confirm backups and recovery tests succeed, and support business continuity exercises.

• Hold managed security partners to their service levels with monthly metrics.

• Support penetration test scoping and track findings to closure.

• Produce evidence and reports for HIPAA audits and SOC 2 readiness.

• 3 to 5 years in a SOC, incident response or security operations role.

• Hands-on experience with a SIEM or XDR platform, ideally Microsoft Sentinel or Defender XDR.

• Working knowledge of Microsoft 365 and Entra ID security settings.

• Sound judgment on what is a real incident, and clear writing for technical and non-technical readers.

• One or more certifications: CompTIA Security+ or CySA+, GIAC GCIH or GSOC, or Microsoft SC-200.

• Experience in healthcare or another regulated industry.

• Scripting in PowerShell or KQL.

• Experience working with an MSSP or MDR partner.

• A direct line to the hiring team. BLUU KAZI presents your profile in person, so your application never disappears into a portal.
• Coaching at every stage. Interview preparation, feedback after each round and support through the offer.
• Room to grow. Access to BLUU KAZI training and certification paths in cybersecurity, cloud and AI.
• A bench that works for you. Join our network of emerging and veteran technologists and hear first about roles that fit.