Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Work closely with the Senior Security Engineer to define, design, and execute security projects.

• Engage in peer reviews of security configurations, policies, and automation processes.

• Contribute to the creation of documentation, runbooks, and design choices.

• Manage and optimize endpoint detection and response systems, endpoint management, device compliance, email security, cloud access, network monitoring, data loss prevention, and vulnerability management platforms.

• Secure Azure/EntraID and AWS cloud environments, focusing on IAM, logging, monitoring, network controls, encryption, key management, and configuration baselines.

• Address MDR and other security alerts as part of an on-call rotation.

• Analyze IT, security, and cloud infrastructure logs, directing telemetry to the centralized logging and SIEM system.

• Ensure configurations and deployments comply with HITRUST, NIST, CIS Benchmarks, HIPAA, and OWASP Top 10 standards.

• Convert framework requirements into actionable technical controls for new systems, cloud accounts, and services.

• Develop, implement, and test incident response protocols.

• Manage and mitigate cybersecurity threats impacting systems and personnel.

• Utilize AI tools for log analysis, documentation, evidence preparation, scripting, and alert triage.

• Carry out security control initiatives in line with schedules, information security objectives, and corporate policies.

• Handle sensitive and personal data with discretion.

• Perform other assigned tasks as necessary.

⛳️ Requirements

• A Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related discipline is preferred.

• Relevant certifications such as AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, GIAC, Security+, CySA+, CEH, or CISSP are desirable.

• Over 3 years of experience in roles such as Information Security Analyst, Risk Analyst, Security Engineer, or Information Security Engineer, with at least 2 of those years in the healthcare sector.

• Experience utilizing Artificial Intelligence (AI) tools to enhance and automate security operations.

• Familiarity with managing HITRUST and HIPAA compliance and collaborating with auditors.

• Knowledge of IT systems including AWS, Microsoft Intune, EntraID, JAMF, Meraki, and JIRA Service Management.

• Strong diagnostic and problem-solving skills, with the ability to innovate and expand knowledge in a dynamic environment.

• Comfortable working with access control, confidential information, encryption, business continuity, information security vulnerability assessments, and cloud services.

• Proven experience in executing business impact projects within established scope, deliverables, and timelines.

• Ability to maintain composure and lead the technical response during security incidents and data breaches.

🏝️ Benefits

• Annual bonus incentive.

• Competitive company benefits package.

• Eligibility for employee equity purchase program.

• Competitive medical, dental, and vision insurance.

• Healthcare and Dependent Care FSA; company-funded HSA.

• 401(k) with a 4% match, fully vested from day one.

• Employer-covered short and long-term disability insurance.

• Life insurance equivalent to 1x annual salary.

• 20 days of PTO plus 10 Company Holidays and 2 Floating Holidays.

• Paid leave for new parents.

• Additional benefits to be outlined in the offer.