Security Engineer II

This is a fully remote position, open to applicants in Texas.

📋 Description

• Design, implement, configure, and uphold security measures across cloud, endpoint, network, identity, and application environments.

• Administer and enhance technologies related to SIEM, EDR/XDR, vulnerability management, email security, DLP, identity protection, firewalls, and cloud security.

• Monitor and analyze security alerts, suspicious behaviors, potential threats, and security incidents.

• Create and refine security detections, alerts, dashboards, and automated response workflows.

• Conduct vulnerability scans and assist in remediation across servers, endpoints, applications, cloud infrastructure, and network devices.

• Aid in penetration testing, security assessments, and remediation initiatives.

• Support identity and access management measures, including SSO, MFA, conditional access, and privileged access management.

• Investigate suspicious login activities, compromised accounts, and identity-related threats.

• Contribute to securing Microsoft Azure and/or AWS cloud infrastructure and services.

• Collaborate with DevOps and Software Engineering to integrate security into CI/CD pipelines and software development workflows.

• Engage in incident response activities, including investigation, containment, eradication, recovery, and post-incident analysis.

• Analyze security logs, endpoint telemetry, authentication events, network activity, and forensic data.

• Ensure compliance with HIPAA, HITRUST, SOC 2, PCI-DSS, and relevant contractual and regulatory obligations.

• Assist GRC teams by providing technical evidence for audits, assessments, and customer security evaluations.

• Maintain security documentation, procedures, standards, diagrams, and technical control evidence.

• Collaborate with Infrastructure, DevOps, Software Engineering, IT, Compliance, and GRC teams to identify risks and enhance security controls.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent practical experience.

• 3–5 years of professional experience in cybersecurity, security engineering, security operations, or related IT security roles.

• Hands-on experience with SIEM and security monitoring platforms, EDR/XDR technologies, vulnerability management systems, identity and access management, enterprise identity platforms, Azure and/or AWS cloud security, firewalls, network security, secure remote access, email and phishing protection, and DLP.

• Experience in investigating security alerts and responding to security incidents.

• Working knowledge of vulnerability management and remediation processes.

• Understanding of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and network segmentation.

• Familiarity with Windows and Linux security fundamentals.

• Ability to analyze logs and security telemetry across various systems.

• Proficiency in scripting or automation using PowerShell, Python, Bash, APIs, or similar technologies.

• Strong troubleshooting, analytical, and documentation abilities.

• Capability to communicate technical security risks effectively to both technical and non-technical audiences.

• Experience in healthcare, healthcare technology, revenue cycle management, medical billing, or another highly regulated sector.

• Experience in securing environments that handle, process, or transmit PHI.

• Relevant certifications preferred but not mandatory, such as Security+, CySA+, SSCP, GSEC, AZ-500, SC-200, Cisco, or AWS Certified Security – Specialty.

• Willingness to travel up to approximately 10% as necessary.

🏝️ Benefits

• Comprehensive medical, dental, and vision plans.

• Company-funded Basic Life and AD&D insurance.

• Coverage for short-term and long-term disability.

• Optional Voluntary Life and AD&D benefits available for purchase.

• 401(k) retirement plan with company match.

• Paid time off (PTO) accrued from the first day of employment.

• Flexible benefit options.