Senior Security Engineer

POSITION: Sr. Security Engineer

PRIMARY ROLE AND RESPONSIBILITIES

• Ensure HIPAA compliance by implementing necessary safeguards to protect Protected Health Information entrusted to us by our clients.
• Design, implement, and maintain cybersecurity architecture leveraging security framework including HIPAA Security Rule, NIST Cybersecurity Framework, and NIST 800-53
• Analyze current cloud and corporate security posture and recommend improvements, build and develop secure systems/infrastructure
• Configure, troubleshoot, and maintain security infrastructure software, tooling, and services
• Work with SecOps leadership, Legal, and Compliance teams to develop, review, and revise Security Policies and Procedures
• Establish Identity and Access guidelines, design and manage authorization and authentication systems, review access requests for approval, perform periodic audits of existing access
• Lead security components of audits such as SOC 2 Type 2, HITrust, and PCI
• Lead response to client security assessments
• Work with our Managed Service Provider to effectively monitor our systems for threats, and triage incidents using best practices methodology
• Work with Development and CloudOps to identify, manage and remediate vulnerabilities
• Provide Cyber Security training and mentorship to staff
• Develop and maintain documentation around security practices, incident response, and security protocols
• Provide metrics-based reporting utilizing cloud and third-party tools to identify and respond to security threats
• Great communicator with the ability to relay critical information to leadership promptly
• Stay up to date with industry trends and advancements in current attacks and remediations
• Ability to solve intricate problems with key source systems (Directory, Database, etc…)

REQUIRED EXPERIENCE AND QUALIFICATIONS

• Bachelor’s degree in Computer Science, Engineering, or related field
• Relevant experience at a senior engineering level for at least 5 years - may substitute for education.
• Experience with Cloud Service Providers such as AWS, Azure or GCP
• Experience with Microsoft Entra, Active Directory, and AWS IAM administration
• Experience with HIPAA, NIST, SOC2, and HITrust security controls
• Current information security certification (CISSP, CSSLP, CCFP, CISM)
• Experience using Agile methodologies including Scrum or Kanban
• Strong knowledge of operating systems (Windows) and network protocols.
• Familiarity with cloud security (e.g., AWS, Azure) and DevSecOps practices.

ADDITIONAL PREFERRED EXPERIENCE