Information Security Engineer

SCAN Health Plan; Long Beach, Northern (CA, KY); Hybrid; USD 92,000 - 159,000; Full time

Benefits offered by this job

Annual bonus program

Wellness program

PTO and holidays

401(k) with employer match

Tuition reimbursement

Job summary

SCAN Health Plan is seeking an Information Security Engineer to safeguard digital assets in Azure, Windows, and M365 hybrid environments. You will lead security deployments, enforce IAM/Zero Trust, and collaborate across teams to strengthen posture against evolving threats. Prior experience with HIPAA security and healthcare data is valued.

The role involves monitoring, incident response, and on-call rotations, with a strong focus on regulatory compliance and continuous improvement.

Qualifications

• Bachelor’s degree in information security, cyber security, IT or related field.
• 3+ years of information security or cyber security experience.
• 2+ years in security monitoring, threat detection, incident response or SOC operations.
• 2+ years healthcare, HIPAA/PHI security experience.
• Certifications such as Microsoft Certified or CISSP are a plus.

Responsibilities

• Monitor security operations across Microsoft 365 and cloud tenants for consistent controls and compliance.
• Investigate and triage security events in SOC/IR processes.
• Configure and maintain security controls across M365, Azure and endpoints.
• Collaborate with infra, cloud, networking and apps teams to reduce risk.
• Participate in on-call rotations and incident response activities.

Skills

IAM

Zero Trust

Incident response

SOC operations

Collaboration

Security monitoring

Education

Bachelor’s degree in information security or related field

Tools

Microsoft Defender XDR

Defender for Endpoint

Defender for Office365

Defender for Identity

Microsoft Sentinel

EntraID

Purview

Expel MDR

Job description

About The Company

Founded in 1977 as the Senior Care Action Network, SCAN began with a simple but radical idea: that older adults deserve to stay healthy and independent. That belief was championed by a group of community activists we still honor today as the “12 Angry Seniors.” Their mission continues to guide everything we do. Today, SCAN is a nonprofit health organization serving more than 500,000 people across Arizona, California, Nevada, New Mexico, Texas, and Washington, with over $8 billion in annual revenue. With nearly five decades of experience, we have built a distinctive, values-driven platform dedicated to improving care for older adults. Our work spans Medicare Advantage, fully integrated care models, primary care, care for the most medically and socially complex populations, and next‑generation care delivery models. Across all of this, we are united by a shared commitment: combining compassion with discipline, innovation with stewardship, and growth with integrity. At SCAN, we believe scale should strengthen—not dilute—our mission. We are building the future of care for older adults, grounded in purpose, accountability, and respect for the people and communities we serve.

The Job

The Information Security Engineer is responsible for safeguarding the organization’s digital assets and information systems by implementing, monitoring, and optimizing security solutions across Azure, Windows, and M365 hybrid environments. This position plays a critical role in identifying and mitigating organizational risks, enforcing best practices in identity and access management, and supporting a wide range of Microsoft technologies, including Intune, Defender, and SharePoint Online. The role requires proactive collaboration with cross‑functional teams to deliver effective security deployments, ensure regulatory and policy compliance, and maintain a robust posture against evolving cyber threats. The engineer will prioritize, plan, and manage projects and incidents, uphold the confidentiality and integrity of sensitive information, and continually enhance technical expertise through education and engagement with the cybersecurity community.

Your Responsibilities

• Monitor and support security operations across multiple Microsoft 365 and cloud tenants, ensuring consistent security controls, visibility, and compliance.
• Perform continuous monitoring, investigation, and triage of security events, alerts, and incidents generated by the Security Operations Center (SOC).
• Utilize and administer Microsoft security technologies including Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Office365, Microsoft Defender for Identity, Microsoft Sentinel, Microsoft EntraID, and other Microsoft security solutions.
• Assist with the implementation, configuration, and maintenance of security controls protecting Microsoft 365, Azure, endpoints, identities, collaboration platforms, and cloud services.
• Collaborate with infrastructure, cloud, networking, and application teams to strengthen security posture and reduce organizational risk.
• Participate in on‑call rotations and incident response activities as required.
• Analyze and respond to threats, suspicious activity, indicators of compromise (IOCs), and security incidents following established incident response procedures.
• Monitor and investigate security events through Expel MDR, Microsoft Sentinel, and related security monitoring platforms.
• Strong understanding of IAM, Conditional Access, and experience with least privileged roles in alignment with Zero Trust.
• Azure Identity and Role Configuration experience a must.
• Familiarity with networking components, such as next‑gen firewalls and Prisma Access.

Assigning Emphasis

We seek Rebels who are curious about AI and its power to transform how we operate and serve our members.

Actively support the achievement of SCAN’s Vision and Goals.

Other duties as assigned.

Your Qualifications

• Bachelor’s degree in information Security, Cyber Security, Information Technology or related field.
• Relevant certifications (preferred but not required), such as Microsoft Certified (various), CISSP.
• 3+ years of Information Security or Cyber Security experience.
• 2+ years of hand‑on experience with security monitoring, thread detection, incident response or SOC operations.
• 2+ years in healthcare, HIPAA/ PHI security experience.

Experience Required

• Working knowledge of Microsoft security platforms, including Microsoft Defender XDR, Defender for Endpoint, Defender for Office365, Defender for Identity, Microsoft Sentinel, EntraID, Purview, and related Microsoft security technologies.
• Familiarity with Managed Detection and Response (MDR) services such as Expel.
• Experience securing Microsoft 365, Azure, SharePoint Online, OneDrive, Teams, Exchange Online, and other Microsoft cloud services.
• Experience with HIPAA compliance and HITRUST certification.
• Provides escalation support for various development and infrastructure teams as well as other groups within IT.
• Contributes team effort by accomplishing related results as needed.
• Ensure accurate and timely completion of all the work assigned.

What’s in it for you?

• Base salary range: $92,400 to $159,133 annually
• An annual employee bonus program
• Robust Wellness ProgramGenerous paid‑time‑off (PTO)
• 11 paid holidays per year, 1 floating holiday, birthday off, and 2 volunteer days
• Excellent 401(k) Retirement Saving Plan with employer match
• Robust employee recognition program
• Tuition reimbursement
• An opportunity to become part of a team that makes a difference to our members and our community every day!

Company Culture

At SCAN we believe that it is our business to improve the state of our world.

Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects our community through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more.

SCAN is proud to be an Equal Employment Opportunity and Affimative Action workplace.

Individuals seeking employment will receive consideration for employment without regard to race, color, national origin, religion, age, sex (including pregnancy, childbirth or related medical conditions), sexual orientation, gender perception or identity, age, marital status, disability, protected veteran status or any other status protected by law.

A background check is required.

#LI-JB1 #LI-Hybrid Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41CFR60-1.35(c)

Become part of a mission‑driven team that makes a difference in the lives of seniors every day. SCAN has a long history of finding and investing in ways to meet seniors’ needs. This focus is what attracts employees to SCAN. For each and every one of us, the SCAN mission is personal. Keeping Seniors Healthy and Independent is both our mission and our passion. That same commitment carries over to our employees. We provide the training, tools and support necessary to do your work. We reward effort and celebrate success. SCAN both develops and attracts people who are leading experts in their respective fields. If the SCAN mission is one you believe in too, we invite you to explore the career opportunities at SCAN.

Why consider a career at SCAN?

• A competitive compensation and benefits program
• An annual employee bonus program
• Generous paid‑time‑off (PTO)
• Eleven paid holidays per year
• Excellent Retirement Savings program
• A work‑life balance
• An opportunity to become part of a team that makes a difference to our members and our community every day!