Cloud Security Engineer — Hybrid (Remote/Onsite)

MEDITECH International; Canton, Northern (MA, KY); Hybrid; USD 66,000 - 105,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Profit sharing & 401(k)

Tuition reimbursement

Generous paid time off

Job summary

MEDITECH International seeks an Information Security Engineer to manage day-to-day access and security of system resources within a Cloud Services environment. You will implement and maintain controls to ensure confidentiality, integrity, and availability, while coordinating with multiple teams on security projects and incidents.

The role emphasizes governance, risk assessment, and remediation planning, with a focus on least privilege, secure configurations, and incident response in a hybrid

Qualifications

• Bachelor's or associate degree preferred, and/or 2-3 years applicable work or military experience.
• Security certifications preferred: CISSP, CISA, GISF, GCED, GNFA, CCSP, CCSK.
• Knowledge of information security standards and best practices (ISO 27001/27002/27017, NIST).

Responsibilities

• Ensure confidentiality, integrity, and availability of system resources.
• Coordinate with monitoring groups to prioritize actions and remediation.
• Plan and implement security controls and risk assessments.
• Provide security feedback and expertise to stakeholders.

Skills

Scripting experience

Security monitoring

Vulnerability assessment

Analytical thinking

Stakeholder management

Strong communication

Education

Bachelor's or associate degree

CISSP

CISA

GISF

GCED

GNFA

CCSP

CCSK

Job description

MEDITECH International seeks an Information Security Engineer to manage day-to-day access and security of system resources within a Cloud Services environment. You will implement and maintain controls to ensure confidentiality, integrity, and availability, while coordinating with multiple teams on security projects and incidents.

The role emphasizes governance, risk assessment, and remediation planning, with a focus on least privilege, secure configurations, and incident response in a hybrid