Cybersecurity Engineer II

The Cybersecurity Engineer II is responsible for assessing, securing, and integrating technology environments associated with mergers and acquisitions across Hanger's national network of patient care clinics and business operations. Working across the full deal lifecycle, from pre-close due diligence through Day 1 stabilization and post-close integration, this role performs hands-on security engineering, technical assessments, compromise assessment and threat hunting, remediation, and implementation of enterprise security controls across acquired environments.

The Cybersecurity Engineer II partners with Hanger’s corporate Security leadership team to translate technical findings into clear, business-focused risk reporting that informs deal decisions and integration priorities, and helps ensure that protected health information (PHI) and critical clinical and business systems in acquired companies are brought up to enterprise security and compliance standards.

Due Diligence and Assessment

• Pre-Close Due Diligence: Support pre-close security due diligence by reviewing target-company security documentation, questionnaire responses, incident and breach history, and external attack surface to identify deal-impacting risks and inform integration planning.
• Technical Assessments: Perform technical security assessments across on-premises, cloud, and hybrid environments.
• Compromise Assessment and Threat Hunting: Conduct or coordinate compromise assessments and threat hunting in acquired environments before network interconnection, looking for indicators of compromise, persistence mechanisms, unauthorized or stale accounts, and anomalous authentication activity.
• Vulnerability Assessment: Conduct vulnerability assessments, coordinate penetration testing of acquired systems, and drive remediation of identified security gaps and misconfigurations.
• Application and Data Review: Review acquired-company application portfolios to identify business-critical systems (including electronic health record, practice management, and billing platforms), data sensitivity and PHI locations, authentication methods, integrations, and security risks.
• Third-Party Risk: Inventory and assess acquired-company vendors, business associates, and sub-processors, and identify gaps in Business Associate Agreements and security-related contract terms.

Integration and Remediation

• Day 1 Controls: Define and implement Day 1 security controls for acquired entities, including enforced multifactor authentication, privileged access cleanup, endpoint protection, email security, and centralized logging.
• Security Tooling: Deploy, configure, and support enterprise security tooling and controls within acquired environments, including endpoint detection and response, SIEM, identity governance, email security, secure access, and backup platforms.
• Cloud Hardening: Perform hands-on security hardening of cloud environments, including identity, access controls, network exposure, logging, configuration, and remediation of identified weaknesses.
• Network Segmentation: Design and validate secure interconnection and segmentation between acquired and enterprise networks, including separation of clinical, corporate, and vendor zones.
• Platform Integration: Integrate acquired environments with enterprise security platforms, controls, and processes, including security monitoring, vulnerability management, incident response, and identity lifecycle management.
• Monitoring and Incident Response: Monitor and analyze security events in acquired environments during the integration window, when threat activity is typically elevated, and respond to and investigate incidents, performing initial containment, eradication, recovery, and documentation in coordination with Security Operations.
• Automation: Use PowerShell, Python, or similar scripting to automate discovery, assessment, and onboarding tasks so that each integration is faster and more consistent than the last.

Risk, Compliance, and Collaboration

• Risk Reporting: Document technical findings, remediation activities, and residual risks, and produce risk-rated findings, remediation plans with estimated effort and cost, and business-focused summaries for technical, deal team, and leadership stakeholders.
• Compliance: Assess acquired environments against the HIPAA Security Rule and enterprise frameworks such as NIST CSF 2.0, NIST SP 800-53, and PCI DSS, and support audit and compliance activities through integration.
• Playbook and Standards: Develop and maintain the M&A security playbook, including diligence questionnaires, assessment runbooks, Day 1 checklists, and integration standards, and contribute to related security policies, standards, and procedures.
• Collaboration: Collaborate with M&A, Legal, Compliance, Privacy, Security, Identity, Infrastructure, Networking, and acquired-company IT teams to support secure integration.
• Workforce Onboarding: Support security awareness and onboarding for acquired-company workforces to align them with enterprise security policies and best practices.

• Experience: 5+ years of experience in cybersecurity, security engineering, cloud security, or a related field, including hands-on technical assessment and remediation work.
• Education: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent work experience.
• Identity and Cloud: Hands-on experience securing Active Directory, Microsoft Entra ID, and cloud environments, including Azure and AWS.
• Security Tooling: Experience deploying and supporting enterprise security tooling such as endpoint detection and response, SIEM, email security, firewalls, IDS/IPS, vulnerability scanning, and identity governance platforms.
• Vulnerability Management: Experience identifying and remediating vulnerabilities and security misconfigurations.
• Must have, or be eligible to obtain, a valid driver’s license and driving record within the standards outlined within Hanger’s Motor Vehicle Safety Policy and Procedures.

Preferred Qualifications

• Experience supporting mergers, acquisitions, divestitures, or large-scale technology integrations.
• Experience with compromise assessments, threat hunting, technical due diligence, or third-party security assessments.
• Healthcare industry experience, including protecting PHI, securing electronic health record and practice management systems, managing connected medical device risk, and working with Business Associate Agreements.
• Experience securing enterprise applications and cloud-hosted environments.
• Experience consolidating identities, endpoints, and email tenants from acquired companies into an enterprise environment.
• Experience with HIPAA, PCI DSS, ISO/IEC 27001, or SOC 2 control environments.
• Project management skills and the ability to manage multiple integration workstreams concurrently.
• Security and Cloud Certifications: CISSP, CCSP, GSEC, Security+, Microsoft SC-500 (Cloud and AI Security Engineer Associate), AWS Certified Security 6 Specialty, CCSK, or equivalent.
• Incident Response Certifications: GCIH, GCFA, or equivalent incident handling and forensics certifications.

• Investigation: Ability to perform log analysis, incident investigation, and threat hunting using monitoring and detection tools.
• Technical Knowledge: Strong knowledge of identity and access management, endpoint security, cloud security, vulnerability management, network protocols, system hardening, and security architecture fundamentals.
• Scripting and Automation: Ability to use PowerShell, Python, or similar languages to automate security and identity workflows.
• Frameworks: Working knowledge of the HIPAA Security Rule and security frameworks such as NIST CSF 2.0 and NIST SP 800-53.
• Soft Skills: Strong analytical problem-solving abilities; clear written and verbal communication, including translating technical findings for non-technical and executive audiences; sound judgment in handling confidential, time-sensitive deal information; and a teamwork orientation.
• Travel: Ability to travel to acquired-company and clinic locations as needed.
• Act with integrity in all ways and at all times, remaining honest, transparent, and respectful in all relationships.
• Keep the patient at the center of everything that you do, building lifelong trust.
• Foster open collaboration and constructive dialogue with everyone around you.
• Continuously innovate new solutions, influencing and responding to change.
• Focus on superior outcomes, and calibrate work processes for outstanding results.

Pay range of $110,400-$138,000 + bonus + benefits. This pay range is posted to comply with wage transparency laws. Hanger salary ranges vary based on skill, ability, knowledge, geographic location and other variables.

• Competitive Compensation Packages
• 8 Paid National Holidays & 4 additional Floating Holidays
• PTO that includes Vacation and Sick time
• Medical, Dental, and Vision Benefits
• 401k Savings and Retirement Plan
• Paid Parental Bonding Leave for New Parents
• Flexible Work Schedules and Part-time Opportunities
• Generous Employee Referral Bonus Program
• Mentorship Programs- Mentor and Mentee
• Student Loan Repayment Assistance by Location
• Relocation Assistance
• Regional & National traveling CPO/CO/CP opportunities
• Volunteering for Local and National events such as Hanger’s BAKA Bootcamp and EmpowerFest