Security Engineer

This position is listed on behalf of a partner company, which manages all applications and next steps. The partner operates a growing, distributed healthcare network focused on cancer care and clinical operations.

• Provide hands-on technical leadership across security engineering, threat detection, incident response, vulnerability management, and identity and access security.
• Administer, configure, optimize, and maintain enterprise security technologies, including SIEM/SOAR, endpoint protection, email security, privileged access management, and secure network access solutions.
• Maintain and improve Rapid7 InsightIDR, InsightVM, and InsightConnect; Bitdefender GravityZone; Mimecast; Delinea Secret Server; and Cato, ensuring appropriate coverage, effective configurations, and cost-efficient licensing.
• Strengthen security across Microsoft 365, Azure, Entra ID, and other cloud and SaaS environments by implementing configuration baselines, monitoring security posture, and addressing weaknesses.
• Lead security event triage and investigations with managed detection and response partners; coordinate containment, recovery, stakeholder communication, and post-incident reviews.
• Oversee vulnerability scanning, risk-based prioritization, remediation tracking, and patch management across endpoints, servers, cloud platforms, and network infrastructure. Document legacy-system risks and validate compensating controls when immediate remediation is not possible.
• Develop and maintain incident response playbooks, technical standards, operational runbooks, and repeatable procedures.
• Strengthen access controls through multifactor authentication, conditional access, privileged access management, joiner/mover/leaver processes, and periodic access reviews.
• Coordinate annual security risk assessments, vulnerability assessments, and penetration tests aligned with HIPAA and NIST requirements. Track findings, coordinate remediation, and communicate risks and priorities.
• Assess security risks associated with vendors, system integrations, newly onboarded locations, and acquired healthcare practices.
• Serve as technical lead and primary day-to-day contact for managed service providers, managed security service providers, and managed detection and response partners. Evaluate service quality, validate investigations and deliverables, monitor contractual service-level agreements, and coordinate corrective actions.
• Lead, mentor, and develop a team of three security professionals; set priorities, review deliverables, strengthen technical capabilities, and guide complex investigations and remediation.
• Streamline security workflows using PowerShell, Python, and other automation techniques.
• Communicate technical risks, operational priorities, incident findings, remediation progress, and recommendations to IT leadership, decision-makers, and clinical stakeholders.
• Collaborate with internal IT teams and external partners to resolve operational challenges, strengthen security governance, and support healthcare systems and services.

• Bachelor's degree in information security, computer science, or a related field preferred.
• At least eight years of experience in information security or security engineering, including hands-on administration and operation of production security technologies.
• At least two years leading, supervising, or mentoring security professionals.
• Experience overseeing managed service providers, managed security service providers, or managed detection and response partners, and leading security investigations and incident response.
• Practical experience with SIEM/XDR platforms, vulnerability management tools, endpoint protection, email security, network security, cloud security, and privileged access management.
• Experience securing Microsoft 365, Azure, and Entra ID; hands-on familiarity with Rapid7 InsightIDR and InsightVM is desirable.
• Strong understanding of vulnerability assessment, risk prioritization, patch management, remediation validation, and compensating controls.
• Knowledge of HIPAA, HITECH, HITRUST, and the NIST Cybersecurity Framework.
• Experience implementing and maintaining multifactor authentication, conditional access policies, privileged access controls, and identity lifecycle management processes.
• Practical skills in PowerShell, Python, or similar technologies for security automation.
• Ability to coordinate assessments, interpret findings, track remediation, and translate technical vulnerabilities into business priorities.
• Strong written and verbal communication, sound judgment, and ability to explain complex security issues to technical and nontechnical audiences.
• Proactive approach to identifying risks, investigating incidents, managing competing priorities, and implementing sustainable improvements.
• Healthcare or multisite healthcare experience preferred; familiarity with electronic health record systems such as OncoEMR, and experience supporting mergers, acquisitions, or new-site security integration, are desirable.
• Preferred certifications: CISSP, GIAC certifications such as GCIH, GCIA, or GSEC, CCSP, or relevant Microsoft security certifications.
• Ability to work effectively remotely with a suitable home-office setup.

• Fully remote, working from the United States; travel may be required up to 25%.
• Annual salary: $104,200–$155,800, depending on qualifications, experience, and other relevant factors.
• Medical, dental, and vision insurance with access to a broad provider network.
• 401(k) plan with a 100% company match, subject to applicable plan terms, and investment options.
• Paid time off.
• Professional development programs and tuition assistance.
• Internal promotion and opportunities to expand technical expertise and leadership responsibilities.
• Opportunities to participate in annual company summits and connect with colleagues across a national healthcare network.
• Opportunity to shape enterprise security strategy and help protect sensitive patient information and reliable clinical technology.