Information Security Engineer (IS Engr I) - REMOTE

Net Health; Pittsburgh (Allegheny County); Remote; USD 66,000 - 82,000; Full time

Job summary

Net Health in the United States is seeking an Information Security Engineer to advance our security roadmap. You will own Azure cloud security projects, drive vulnerability remediation with development teams, secure AI initiatives, and participate in on-call rotations.

The role requires strong experience in cloud security, audit-ready access reviews, and a practical view of AI risks. You will work with security reviews, vendor risk assessments, and help us stay ahead of post-quantum readiness

Qualifications

• 5+ years in security engineering or cloud security
• Demonstrated experience running access reviews
• Hands-on with AI security tools and cloud security architectures
• Experience with Claude, CrowdStrike, OX Security, Delinea, or similar tooling
• Tracks record of driving projects to completion with minimal oversight
• Strong communication and on-call readiness

Responsibilities

• Cloud Security Engineering: Own Azure cloud security projects
• Vulnerability Management & Security Operations: Drive remediation with dev teams
• AI Security: Evaluate and secure AI tools and MCP servers
• Risk & Access Review: Conduct vendor and employee access reviews and risk assessments

Skills

Azure cloud security

Security engineering

Access reviews

AI security

On-call rotation

Project delivery

Tools

Claude

CrowdStrike

OX Security

Delinea

Job description

About Net Health

Belong. Thrive. Make a Difference.

Are you looking for a meaningful and satisfying career where you have endless opportunities to grow and be financially rewarded? Net Health may be the perfect place for you.

A high-growthand profitable company, we help caregivers harness data for human health.Wealsohonor and respect the needs of our Net Health family and staff,which is why weoffer awork-from-anywhere environment and unlimited PTO.Ourwelcomingand collaborativeculturepaired with progressive benefits makesNet Healththe ultimate career home!

As a leading-edgeSaaScompany in healthcare, we deliver solutions that help patients get better, faster, and livemore fulfilling lives. Our software and predictive analytics coverthecontinuum of care, fromhospital-to-home, across various medical specialties. Come join us andstart the next chapter of your exciting careerwhile helping otherstolive better lives.

World-Class Benefits That Reflect Our World-ClassCulture.

#WorkFromAnywhere#UnlimitedPTO#ComprehensiveBenefitsPackage#EmployeeResourceGroups #CasualDressCode #PrioritizedEmployeeWellness#DiversityAndInclusion#AVoice#NewHireSupport#CareerDevelopment #EducationalAssistance #EmployeeReferralBonus#ProgressiveParentalLeave

JOB OVERVIEW

We're hiring an Information Security Engineer to help close out the engineering work on our security roadmap. You'll take on cloud security projects in Azure as they come up, drive vulnerability remediation alongside our development teams, secure our AI projects, and serve on-call through CrowdStrike Falcon Complete. You'll also apply a security lens to new projects through vendor reviews and risk assessments and help us get ahead of post-quantum cryptography readiness before it becomes urgent.

The work is varied. In a given month you might be implementing a new control in Azure, sitting with a dev team to close a critical CVE, reviewing an MCP server before it goes live, assessing a new API partner, or running an access review. We want someone who moves comfortably between all of it.
We're looking for someone who treats AI as a practical security tool and understands how AI agents and MCPs actually work, including where they introduce risk. If you've already thought about what it means to govern agent access to enterprise data, we want to talk to you.
Our ideal candidate is responsive, independent, and self-directed. Someone who spots security problems early and sees them through to resolution.

Responsibilities and Duties

• Cloud Security Engineering
  • Own Azure cloud security projects, including control enablement
  • Represent security on the Cloud Architecture Review Board and Change Advisory Board
  • Help build our post-quantum cryptography readiness plan
• Vulnerability Management & Security Operations
  • Drive vulnerability remediation with dev teams through CrowdStrike and OX Security
  • Participate in the security on-call rotation, triaging through CrowdStrike Complete
• AI Security
  • Evaluate and secure AI tools, integrations, and agents before deployment
  • Review and approve MCP servers against our governance model
  • Support the AI Steering Committee on security requirements for AI initiatives
• Risk & Access Review
  • Complete vendor and employee software requests, approving or denying based on risk tolerance
  • Conduct architecture, product, and engineering design risk reviews early in the SDLC
  • Own quarterly all-user access reviews

Qualifications

• 5+ years in security engineering or cloud security
• Demonstrated experience running access reviews

1. Working knowledge of AI agents and MCP, including the access and data exposure risks they create

• • Hands-on with Claude, CrowdStrike, OX Security, Delinea, or comparable tooling

2. Track record of driving projects to completion with minimal oversight

3. Highly responsive, with clear stakeholder communication throughout a project

• • Able to participate in an on-call rotation

Required Software Experience

• Microsoft Azure
• CrowdStrike

Note: This job description is not intended to be all-inclusive. Employee may perform other related duties as requested to meet the ongoing needs of the organization.

Salary Range: $65,920.00 - $82,400.00 USD

Candidate Integrity & Monitoring Notice:

We maintain a zero-tolerance policy for using AI tools, deepfakes, or impersonation to misrepresent a candidate's identity, skills, or qualifications during hiring. We use screening and identity verification methods to detect this and reserve the right to disqualify and report violations. Company-issued equipment, systems, and network activity are monitored for security and compliance purposes; details are provided during interviews and in our employee policies.