Job DescriptionWe're searching for a Senior Cyber Security Engineer to join our team. In this role, you will own and mature the day-to-day security posture of our cloud-based SaaS solutions in the healthcare space-and the Microsoft 365 environment that supports them. This is a hands-on engineering and advisory role responsible for vulnerability management, incident response, cloud and endpoint hardening, and the compliance evidence that keeps our HITRUST CSF certification and HIPAA obligations current.
How You'll Spend Your Time- Lead vulnerability management activities across Azure, Microsoft 365, and SaaS environments to identify risks, prioritize remediation efforts, and reduce organizational exposure.
- Monitor and strengthen cloud, endpoint, identity, and data protection controls in order to proactively defend against evolving cyber threats.
- Coordinate incident response activities, including ransomware, phishing, account compromise, and business email compromise investigations to minimize operational and security impacts.
- Partner with Engineering, DevOps, Privacy, and Infrastructure teams to implement secure configurations, logging, monitoring, and compliance-focused controls.
- Manage HITRUST, HIPAA, and NIST-aligned security initiatives while supporting customer security reviews, audit activities, governance documentation, and risk management programs.
What Kind of Things We're Most Interested in You Having- 5+ years of experience in cybersecurity engineering, security operations, security consulting, or a related information security role.
- Proven success leading vulnerability management programs, security remediation efforts, and incident response investigations from triage through resolution.
- In-depth knowledge of cybersecurity frameworks and regulatory requirements, including HITRUST, HIPAA, NIST CSF, NIST 800-53, ISO 27001, SOC 2, or similar standards.
- Ability to work remotely within the United States and travel occasionally as business needs require.
- Sincere interest in protecting healthcare data, advancing security best practices, and supporting patient safety through technology.
- A knack for working collaboratively across technical and business teams within a fast-paced, highly regulated healthcare technology environment.
Preferred Qualifications- Experience securing Microsoft Azure and Microsoft 365 environments, including Entra ID, Defender, Sentinel, Intune, Purview, and Conditional Access.
- Experience developing automation and operational efficiencies using PowerShell and/or Python.
- Experience maintaining or preparing for HITRUST certification assessments.
- Experience completing customer security assessments, including SIG, CAIQ, HECVAT, and healthcare-specific security questionnaires.
- CISSP preferred; Security+, CCSP, CISA, HITRUST CCSFP, Azure Security Engineer, or similar certifications are a plus.
By enabling flexibility in how we work and prioritizing employee wellness, we empower our team to do and be their best. Our benefits package includes health, dental, vision, life, disability insurance, 401K, paid time off, and paid holidays.
Salary offers are based on a wide range of factors including location, relevant skills, training, experience, education, and, where applicable, licensure or certifications obtained. Market and organizational factors are also taken into consideration.
Skills & Requirements Qualifications
