Job Application for Cybersecurity Analyst II at CareDx, Inc.

New

CareDx is a leading precision medicine diagnostics company advancing care in transplant, specialty oncology, and cell therapy. Through our innovative portfolio of molecular diagnostics, digital health solutions, AI-powered data and analytics, and patient support services, we partner with healthcare providers, patients, and biopharma organizations to help inform clinical decision-making and improve patient outcomes.

At CareDx, every employee has the opportunity to contribute to innovations that help transform patient care and improve lives.

The Cybersecurity Analyst II is responsible for protecting CareDx’s information systems, networks, applications, endpoints, and data from cybersecurity threats through operational monitoring, incident response, policy enforcement, security tooling administration, and risk reduction activities.

This role serves as an experienced cybersecurity operations resource responsible for independently monitoring, investigating, analyzing, and responding to cybersecurity events across multiple security platforms including SIEM, EDR, ThreatLocker, DLP, and AI Detect and Response (AIDR) technologies.

The position will play a key role in supporting CareDx’s expanding AI security program through monitoring, configuration support, incident analysis, operational governance, and collaboration with AI security vendors to ensure AI technologies are adopted securely without unnecessarily restricting business growth and innovation.

This role requires prior hands-on cybersecurity operations experience and the ability to work across technical, operational, compliance, and business functions.

Key Responsibilities:

Monitor, configure, and maintain AI Detect and Response (AIDR) tooling to identify and reduce risks associated with organizational AI usage
Monitor security alerts, logs, dashboards, and telemetry from SIEM, EDR, ThreatLocker, DLP, cloud, and other cybersecurity platforms
Investigate, triage, and respond to cybersecurity incidents including malware, phishing, unauthorized access, suspicious behavior, policy violations, and potential data exposure events
Support ThreatLocker operational response activities including application control reviews, policy management, and endpoint troubleshooting
Analyze DLP alerts and assist with investigations involving sensitive data handling, potential exfiltration events, and policy violations
Conduct vulnerability analysis and coordinate remediation activities with infrastructure, engineering, and application teams
Assist with threat hunting, threat modeling, security assessments, and control gap analysis activities
Participate in incident response activities including containment, investigation, root cause analysis, remediation coordination, and post-incident reporting
Support security monitoring and operational governance for technologies and emerging threats
Assist with development and maintenance of cybersecurity operational procedures, standards, and documentation
Support compliance, audit, and regulatory activities related to frameworks such as NIST, ISO 27001, HIPAA, SOC 2, and SOX
Stay current on emerging cybersecurity threats, AI security risks, vulnerabilities, attack techniques, and industry best practices
Collaborate with IT, Engineering, Compliance, Legal, Risk Management, and business stakeholders to strengthen CareDx’s security posture

Qualifications:

Education: High School Diploma or GED required. Associate’s or Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field preferred.
Industry-recognized cybersecurity certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or comparable certifications preferred.
Experience: 2-3 or more years of cybersecurity, security operations, incident-response, or related IT experience.
Experience investigating EDR, MDR, endpoint, identity, or email-security alerts.
Knowledge of Windows, Microsoft 365, Entra ID, endpoint security, and common cyber threats.
Ability to analyze logs, process activity, authentication records, URLs, IP addresses, and file hashes.
Strong investigation, documentation, communication, and prioritization skills.
Experience with ThreatLocker, CrowdStrike, Microsoft Defender, SIEM, or ticketing platforms preferred.
Security+, CySA+, SC-200, or a similar certification preferred.

Additional Details:

Every individual at CareDx has a direct impact on our collective mission to improve the lives of organ transplant patients worldwide. We believe in taking great care of our people, so they take even greater care of our patients.

Our competitive Total Rewards package for US Employees includes:

Competitive base salary and incentive compensation
Health and welfare benefits, including a gym reimbursement program
401(k) savings plan match
Employee Stock Purchase Plan
Pre-tax commuter benefits
And more!
Please refer to our page to view detailed benefits at https://caredx.com/company/careers

In addition, we have a Living Donor Employee Recovery Policy that allows up to 30 days of paid leave annually to a full-time employee who makes the selfless act of donating an organ or bone marrow.

With products that are making a difference in the lives of transplant patients today and a promising pipeline for the future, it’s an exciting time to be part of the CareDx team. Join us in partnering with transplant patients to transform our future together.

CareDx, Inc. is an Equal Opportunity Employer-vets/disabled, and participates in the E-Verify program. By proceeding with our application and submitting your information, you acknowledge that you have read our U.S. Personnel Privacy Notice and consent to receive email communication from CareDx. Certain jurisdictions require notice of how we use and protect your personal information. For more information, please read our Privacy Policy

The U.S. EEO posters are available here.

Note: We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us.

#LI-Remote

This is the anticipated base salary range in the United States. The final salary offered to a successful candidate will be dependent on several factors that may include, but are not limited to, the type and length of experience within the job, the type and length of experience within the industry, education, etc. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives and restricted stock units. CareDx is a multi-state employer, and this salary range may not reflect positions that work in other states.

Remote: US only roles

$83,000 - $100,000 USD

First Name

Last Name

Preferred First Name

Country

Phone

Location (City)

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

School

Select...

Degree

Select...

Discipline

Select...

LinkedIn Profile

All positions at CareDx require an in-person interview. Please confirm you read this statement.

Select...

What's your citizenship/employment eligibility?

Select...

Are you authorized to work in the U.S.?

Select...

In the future, will you need sponsorship to work in the U.S. (for example, are you currently on an F-1, OPT, H-1B, TN, J-1, CPT, or other work visa)?

Select...

If hired, can you submit verification of your legal right to work in the U.S.?

Select...

Do you 2-3 years of hands-on experience in cybersecurity, security operations, incident response, or a related IT security role?

Select...

Do you have experience working with Microsoft 365, Entra ID (Azure AD), Windows environments, or endpoint security technologies?

Select...

Do you have experience investigating security alerts from endpoint, identity, email security, EDR, MDR, or similar security monitoring tools?

Select...

Are you comfortable analyzing security logs, authentication events, URLs, IP addresses, file hashes, and other indicators of compromise during investigations?

Select...

Have you participated in cybersecurity incident investigations involving phishing, malware, unauthorized access, policy violations, or similar security events?

Select...

Have you previously worked for CareDx, in any capacity?

Select...

Are you over the age of 18 years?

Select...

If under 18 years of age, do you have a work permit?

Select...

May we contact you about future opportunities at CareDx?

Select...

Are you open to relocation?

Select...

Please list your street address.

Please list your city.

Please list your state.

Please list your zip/postal code.

What is the highest degree or level of education you have completed?

Select...

What is your desired salary?

What is your desired hourly wage?

Has an employee of CareDx referred you?

Select...

If an employee of CareDx referred you, please list their full name.

Please provide three (3) professional references. We do not contact references until a candidate is near the offer stage. You will be notified before references are contacted.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in CareDx, Inc.’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Select...

Are you Hispanic/Latino?

Select...

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Select...

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Cybersecurity Analyst II

Apply for this job

Voluntary Self-Identification

Voluntary Self-Identification of Disability