InfoSec Engineer — Build Secure, Impactful Systems

Aveanna Healthcare; Atlanta (GA); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

401(k) matching

ESPP

Career path

Job summary

Aveanna Healthcare seeks an Information Security Engineer to mature our security program, protect assets, and ensure compliance across the organization. You will document, test, and advance information security measures aligned with HIPAA, PCI, and industry standards.

Responsibilities include evaluating security controls, leading remediation efforts, and collaborating with PM teams to secure SDLC phases. Experience with Nessus, SIEM, and EDR is valued; strong communication is essential.

Qualifications

• 3 to 5 years of IT experience with at least 1 year in security architecture.
• Experience conducting disaster recovery, business continuity, and incident response exercises.
• In-depth experience implementing security solutions and security architectures.

Responsibilities

• Facilitate architecture, design, and deployment discussions to ensure HIPAA and PCI compliant solutions.
• Validate security standards against industry best practices and provide improvement recommendations.
• Use vulnerability tools to identify and prioritize risks across the enterprise.
• Evaluate and plan new security technologies and their implementations.
• Document and validate business procedures against published policies.
• Define security configurations for systems and applications, including IAM, network, and endpoint security.

Skills

Security architecture

HIPAA & HITECH compliance

NIST & ISO 27001

Vulnerability management

SIEM experience

EDR solutions

Windows administration

Network administration

Disaster recovery planning

Communication

Tools

Nessus

SIEM

EDR

Purview

Intune

Windows Server

Job description

Aveanna Healthcare seeks an Information Security Engineer to mature our security program, protect assets, and ensure compliance across the organization. You will document, test, and advance information security measures aligned with HIPAA, PCI, and industry standards.

Responsibilities include evaluating security controls, leading remediation efforts, and collaborating with PM teams to secure SDLC phases. Experience with Nessus, SIEM, and EDR is valued; strong communication is essential.