Cybersecurity Engineer II

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist with pre-close security due diligence by evaluating security documentation from target companies, responses to questionnaires, history of incidents and breaches, and external attack surfaces.

• Execute technical security evaluations across on-premises, cloud, and hybrid settings.

• Carry out or coordinate compromise assessments and threat hunting in environments that have been acquired.

• Perform vulnerability assessments, organize penetration testing, and lead the remediation of security vulnerabilities and misconfigurations.

• Assess the application portfolios, data sensitivity, locations of PHI, authentication methods, integrations, and security risks of acquired companies.

• Inventory and evaluate vendors, business associates, and sub-processors of acquired companies.

• Define and implement Day 1 security measures, which include multifactor authentication, cleanup of privileged access, endpoint protection, email security, and centralized logging.

• Deploy, configure, and provide support for enterprise security tools such as EDR, SIEM, identity governance, email security, secure access, and backup platforms.

• Strengthen cloud environments in terms of identity, access controls, network exposure, logging, and configuration.

• Design and verify secure network interconnections and segmentation.

• Integrate acquired environments with enterprise security platforms and procedures.

• Monitor and analyze security events, responding to incidents throughout the integration process.

• Utilize PowerShell, Python, or similar scripting languages to automate discovery, assessment, and onboarding tasks.

• Document findings, remediation actions, residual risks, remediation strategies, estimated efforts and costs, along with business-focused summaries.

• Evaluate acquired environments in accordance with the HIPAA Security Rule, NIST CSF 2.0, NIST SP 800-53, and PCI DSS standards.

• Develop and maintain the M&A security playbook, assessment runbooks, Day 1 checklists, and integration protocols.

• Collaborate with teams from M&A, Legal, Compliance, Privacy, Security, Identity, Infrastructure, Networking, and the IT departments of acquired companies.

• Facilitate security awareness and onboarding for the workforce of acquired companies.

⛳️ Requirements

• Over 5 years of experience in cybersecurity, security engineering, cloud security, or a related field, including practical technical assessment and remediation experience.

• A Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.

• Direct experience in securing Active Directory, Microsoft Entra ID, and cloud environments, including Azure and AWS.

• Experience in deploying and supporting enterprise security tools such as endpoint detection and response, SIEM, email security, firewalls, IDS/IPS, vulnerability scanning, and identity governance platforms.

• Proven experience in identifying and addressing vulnerabilities and security misconfigurations.

• Must possess, or be eligible to obtain, a valid driver’s license and maintain a driving record that meets Hanger’s Motor Vehicle Safety Policy and Procedures standards.

• Capability to conduct log analysis, incident investigation, and threat hunting using monitoring and detection tools.

• Strong understanding of identity and access management, endpoint security, cloud security, vulnerability management, network protocols, system hardening, and fundamental security architecture principles.

• Proficiency in using PowerShell, Python, or similar programming languages to automate security and identity workflows.

• Familiarity with the HIPAA Security Rule, NIST CSF 2.0, and NIST SP 800-53.

• Willingness to travel to acquired company and clinic locations as necessary.

• Excellent analytical and problem-solving skills.

• Strong written and verbal communication skills, including the ability to convey technical findings to non-technical and executive audiences.

• Sound judgment in managing confidential, time-sensitive deal information.

• Team-oriented mindset.

🏝️ Benefits

• Competitive Compensation Packages.

• 8 Paid National Holidays & 4 additional Floating Holidays.

• Paid Time Off (PTO) that encompasses Vacation and Sick time.

• Medical, Dental, and Vision Benefits.

• 401k Savings and Retirement Plan.

• Paid Parental Bonding Leave for New Parents.

• Flexible Work Schedules and Part-time Opportunities.

• Generous Employee Referral Bonus Program.

• Mentorship Programs for both Mentors and Mentees.

• Student Loan Repayment Assistance available by Location.

• Relocation Assistance offered.

• Opportunities for Regional & National traveling CPO/CO/CP roles.

• Participation in Local and National events such as Hanger’s BAKA Bootcamp and EmpowerFest.

• Bonus opportunities.