Associate Security Engineer

LE1000 Veradigm LLC; Raleigh (NC); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Holidays

Vacation

Medical, dental, and vision insurance

Company paid life insurance

Retirement savings

Job summary

Veradigm Inc. is seeking an Associate Product Security Liaison to serve as the day-to-day security contact for one or more products.

You will triage and track remediation across cloud, application, and infrastructure, and help teams apply security best practices with advanced security technologies. Under guidance from senior PSLs, you will prepare recurring security posture reports for engineering and executives, support the security exception process, and collaborate with product development,

Qualifications

• Bachelor's degree or equivalent required.
• Experience triaging security findings and remediation.
• Familiarity with cloud platforms (AWS/Azure).
• Knowledge of vulnerability management and security controls.
• Strong written and verbal communication skills.

Responsibilities

• Triage and track remediation of security findings across products.
• Prepare and present security posture reports to leadership.
• Assist in architecture reviews for security improvements.
• Support runbooks and incident response activities.
• Coordinate with DevOps, cloud operations and hosting teams.

Skills

Vulnerability management

Cloud security

Linux administration

MITRE ATT&CK

Written communication

Education

Bachelor's degree or equivalent

Tools

Splunk

AWS

Azure

CI/CD security

Application security principles

Job description

The primary purpose of this role is to serve as the day-to-day Product Security Liaison (PSL) for one or more assigned Veradigm products, assisting development and operational teams in the appropriate application of security best practices and the use of advanced security technologies. Working under the guidance of senior PSLs and security leadership, the Associate PSL is the primary security point of contact for assigned product teams. The role triages and tracks remediation of cloud, application, infrastructure, and code-level security findings; helps teams implement future-state security requirements; supports the security exception process; and reports product security posture to engineering and executive leadership. Serve as the assigned security liaison for one or more products, acting as the primary point of contact between the security organization and product development, DevOps, cloud operations, and hosting teams. Assist development and operational teams in the appropriate application of security best practices and the use of advanced security technologies. Accountable for correctly identifying security vulnerabilities and for building and executing remediation plans with product teams, including the tuning and integration of security tools to reduce false positives. Triage, validate, and route findings from cloud security, vulnerability scanning, application security testing, and bug bounty programs; create and track remediation tickets to closure within defined SLAs. Prepare and present recurring security posture reports for assigned products, summarizing risk, open exceptions, and remediation progress for engineering and executive leadership. Assist product teams in implementing future-state security requirements and maturity initiatives, tracking progress and gathering evidence of completion. Review and provide security input on product architecture, design changes, and cloud/network configuration requests with guidance from senior PSLs. Support the security exception process for assigned products, documenting risk, compensating controls, owners, and expiration dates. Support day-to-day technical controls and escalation events from both security tools and the SOC; investigate alerts assigned to the PSL and coordinate response with product teams. Assist in the implementation of security solutions and ensure the fidelity of alerts/reports to the Security Operations Center. Participate in the definition and documentation of runbooks for SOC and product security processes, including process and procedure documentation. Participate in security reviews and sign-off activities for assigned products, such as disaster recovery/business continuity plans and new builds or releases. Review and participate in benchmarking, installation, upgrade, configuration, deployment, and tuning activity for security solutions used by assigned products. Investigate innovative approaches to improve datacenter, cloud, and application hosting security. Experience in Linux OS administration

Job Requirements

Bachelor's Degree or equivalent 0-2 years of relevant job experience.

Preferred Experience Linux, Windows, Splunk, Azure, AWS, CI/CD security, and application security principles.

Understanding of HIPAA healthcare data security.

Knowledge, Skills & Abilities

Working knowledge of common vulnerability classes (e.g., OWASP Top 10, CWE) and severity/prioritization methods (e.g., CVSS, EPSS, CISA KEV).

Understanding of cloud security fundamentals, including identity and access management, least privilege, network segmentation, encryption, and logging.

Ability to translate technical findings into clear business risk for engineering and executive audiences.

Ability to manage priorities across multiple product teams and follow findings through to verified closure.

Clear written communication for tickets, runbooks, technical documentation, and presentations.

Familiarity with attacker techniques and frameworks such as MITRE ATT&CK.

Ability to handle protected health information (PHI) and other confidential data with discretion.

Willingness to learn, seek guidance, and grow into a fully independent PSL.

This is Raleigh, NC-based hybrid role, requiring 2-days in the office each week.

Compensation for this job is subject to market conditions, geographic considerations, the candidate’s unique skills and experience, state and local laws, and budget. Our commitment to pay transparency is a testament to our dedication to creating a fair, equitable, and inclusive workplace. By continuously analyzing market trends, staying abreast of changes in state laws, and making budgetary adjustments accordingly, we strive to ensure that our compensation practices reflect the value we place on our associates’ unique contributions and support their professional growth.

Visa Sponsorship is not offered for this position.

Enhancing Lives and Building Careers

Veradigm believes in empowering our associates with the tools and flexibility to bring the best version of themselves to work and to further their professional development. Together, we are In the Network.

Veradigm offers a comprehensive compensation and benefits package, including holidays, vacation, medical, dental, and vision insurance, company paid life insurance and retirement savings.

At Veradigm, our greatest strength comes from bringing together talented people with diverse perspectives to support the needs of healthcare providers, life science companies, health plans, and the patients they serve.

The Veradigm Network is a dynamic, open community of solutions, external partners, and cutting-edge artificial intelligence technologies that provide advanced insights, technology, and data-driven solutions.

Veradigm’s policy is to provide equal employment opportunity and affirmative action in all of its employment practices without regard to race, color, religion, sex, national origin, ancestry, marital status, protected veteran status, age, individuals with disabilities, sexual orientation or gender identity or expression or any other legally protected category.

Applicants for North American based positions with Veradigm must be legally authorized to work in the United States or Canada.

Verification of employment eligibility will be required as a condition of hire.

Veradigm is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse and inclusive workforce.

From a "VEVRAA Federal Contractor" We request Priority Referral of Protected Veterans

At Veradigm, our primary focus is on harnessing the power of research, analytics, and artificial intelligence (AI) to develop scalable data-driven solutions that bring significant value to all healthcare stakeholders. Together, we can transform healthcare and enable smarter care for millions of people.