Security Analyst II

Garner’s mission is to transform the healthcare economy, delivering high-quality and affordable care for all. We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures. Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale. About the role: We are seeking a Security Analyst to join our Security team. This role is critical to maintaining the security of our app and the infrastructure that supports it. You will be responsible for identifying and mitigating risks across our environment, ensuring that Garner’s security posture remains robust and that our commitment to protecting member data is never compromised. Where you will work: Garner is headquartered in NYC, but this position is available for individuals who are comfortable with remote work and occasional travel to HQ. What you will do: Independently manage day-to-day security operations (SecOps/SOC), including threat monitoring and incident triage with intense urgency. Conduct systematic reviews of system logs and alerts using Wiz and Datadog to uncover root causes and solve for underlying vulnerabilities. Use LLMs (like Claude) to interrogate the health of services and automate security-based data analytics at scale. Navigate hundreds of Kubernetes clusters and disparate data sources to find the "signal in the noise" using SQL and Boolean logic. Build and implement security controls and automated responses within the AWS ecosystem using Python, Go, or TypeScript. Convey technical findings and forensic research concisely to engineering and product teams with clear, actionable remediation steps. Own the execution of recurring compliance tasks and documentation, ensuring all security deliverables are error-free and meet regulatory standards. Identify opportunities to automate manual security checks, moving the team toward a more proactive security engineering model over time. The ideal candidate has: 2+ years of experience in Security Operations, SOC, or a related field, preferably within a scaling startup Proven experience in incident response, including triage, investigation, and resolution in high-pressure environments Hands-on experience with security and observability tools such as Wiz and Datadog, particularly from a forensic or MTDR perspective Strong SQL skills and demonstrated ability to analyze large, complex datasets across distributed systems Experience identifying patterns and extracting meaningful insights from high-volume data (“signal vs. noise”) Familiarity with on-call rotations and a willingness to participate as needed Experience or demonstrated interest in leveraging AI/LLMs (e.g., Claude) for data analysis, troubleshooting, or system interrogation Technologies we use: Wiz , Datadog , Cyberhaven. Claude, Snowflake , SQL, AWS , Terraform, Kubernetes, Python, Go, TypeScript. This is a unique opportunity to join a fast-growing company in a transformative role, helping shape the future of healthcare. Please note: We are unable to sponsor or take over sponsorship of an employment visa at this time. Compensation Transparency: The target salary range for this position is $117,000 - $130,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to particip