InfoSec Engineer: Azure, M365 & Zero-Trust Security

SCAN Health Plan; Long Beach, Northern (CA, KY); Hybrid; USD 92,000 - 159,000; Full time

Benefits offered by this job

Annual bonus program

Wellness program

PTO and holidays

401(k) with employer match

Tuition reimbursement

Job summary

SCAN Health Plan is seeking an Information Security Engineer to safeguard digital assets in Azure, Windows, and M365 hybrid environments. You will lead security deployments, enforce IAM/Zero Trust, and collaborate across teams to strengthen posture against evolving threats. Prior experience with HIPAA security and healthcare data is valued.

The role involves monitoring, incident response, and on-call rotations, with a strong focus on regulatory compliance and continuous improvement.

Qualifications

• Bachelor’s degree in information security, cyber security, IT or related field.
• 3+ years of information security or cyber security experience.
• 2+ years in security monitoring, threat detection, incident response or SOC operations.
• 2+ years healthcare, HIPAA/PHI security experience.
• Certifications such as Microsoft Certified or CISSP are a plus.

Responsibilities

• Monitor security operations across Microsoft 365 and cloud tenants for consistent controls and compliance.
• Investigate and triage security events in SOC/IR processes.
• Configure and maintain security controls across M365, Azure and endpoints.
• Collaborate with infra, cloud, networking and apps teams to reduce risk.
• Participate in on-call rotations and incident response activities.

Skills

IAM

Zero Trust

Incident response

SOC operations

Collaboration

Security monitoring

Education

Bachelor’s degree in information security or related field

Tools

Microsoft Defender XDR

Defender for Endpoint

Defender for Office365

Defender for Identity

Microsoft Sentinel

EntraID

Purview

Expel MDR

Job description

SCAN Health Plan is seeking an Information Security Engineer to safeguard digital assets in Azure, Windows, and M365 hybrid environments. You will lead security deployments, enforce IAM/Zero Trust, and collaborate across teams to strengthen posture against evolving threats. Prior experience with HIPAA security and healthcare data is valued.

The role involves monitoring, incident response, and on-call rotations, with a strong focus on regulatory compliance and continuous improvement.