Lead Security Engineer

Jobgether; United States; Remote; USD 104,000 - 156,000; Full time

Benefits offered by this job

Remote work flexibility

Healthcare coverage

401k match

Paid time off

Tuition assistance

Career growth

Annual company summits

Mission driven

Leadership opportunities

Job summary

Jobgether is seeking a senior Security Engineer to lead enterprise security operations for a multi-site healthcare network. You will oversee SIEM/XDR platforms, vulnerability management, endpoint protection, email security, and PAM while guiding incident response with managed providers.

You will strengthen security in Microsoft 365/Azure/Entra ID, implement baselines, monitor posture, and drive risk-based remediations. A strong leadership and collaboration capability is required.

Qualifications

• Bachelor's degree in information security, computer science, or a related field is preferred.
• At least eight years of experience in information security or security engineering with hands-on administration of production security technologies.
• Two+ years of leadership or mentoring security professionals.
• Experience overseeing managed security partners and leading security investigations.
• Practical experience with SIEM/XDR platforms, vulnerability management, endpoint, email, network, cloud security, and PAM.
• Experience securing Microsoft 365, Azure, and Entra ID, and familiarity with Rapid7 InsightIDR/InsightVM.
• Strong understanding of vulnerability assessment, risk prioritization, patch management, and compensating controls.
• Knowledge of HIPAA, HITECH, HITRUST, and NIST CSF; MFA and conditional access implementation.
• Scripting and automation skills (PowerShell, Python) to automate security processes.
• Ability to coordinate security assessments, interpret findings, and communicate risk to stakeholders.
• Excellent written and verbal communication; proactive risk identification and remediation.

Responsibilities

• Lead administration, configuration, optimization, and maintenance of enterprise security technologies.
• Maintain and improve security tools like Rapid7 InsightIDR/InsightVM, Bitdefender GravityZone, Mimecast, and Delinea Secret Server.
• Strengthen security across Microsoft 365, Azure, Entra ID, and other cloud/SaaS environments.
• Oversee security investigations and incident response with managed partners.
• Manage vulnerability scanning, risk prioritization, remediation tracking, and patch management.
• Develop and maintain incident response playbooks and security runbooks.
• Strengthen access controls with MFA, conditional access, and PAM.
• Coordinate annual security risk assessments and HIPAA/NIST-aligned activities.
• Assess vendor/security risks and ensure safeguards for integrations.
• Lead and mentor a team of three security professionals; drive continuous improvement.
• Identify automation opportunities using PowerShell, Python to streamline workflows.
• Communicate risk and remediation progress to IT leadership and clinical stakeholders.
• Collaborate with internal IT and external partners to maintain healthcare system reliability.

Skills

Leadership

Security operations

Scripting & automation

Communication

Cloud security

Vulnerability management

Risk assessment

Education

Bachelor's degree in information security or computer science

Tools

Rapid7 InsightIDR

InsightVM

InsightConnect

Bitdefender GravityZone

Mimecast

Delinea Secret Server

Cato

Job description

Accountabilities

• Security Engineering and Infrastructure: Lead the administration, configuration, optimization, and ongoing maintenance of enterprise security technologies, including SIEM/SOAR, endpoint protection, email security, privileged access management, and secure network access solutions.
• Security Platform Management: Maintain and improve security tools such as Rapid7 InsightIDR, InsightVM, and InsightConnect; Bitdefender GravityZone; Mimecast; Delinea Secret Server; and Cato, ensuring appropriate coverage, effective configurations, and cost-efficient licensing.
• Cloud and Microsoft Security: Strengthen security across Microsoft 365, Azure, Entra ID, and other cloud and SaaS environments by implementing configuration baselines, monitoring security posture, and addressing identified weaknesses.
• Threat Detection and Incident Response: Lead security event triage and investigations in collaboration with managed detection and response partners, coordinating containment, recovery, stakeholder communication, and post-incident reviews.
• Vulnerability and Patch Management: Oversee vulnerability scanning, risk-based prioritization, remediation tracking, and patch management across endpoints, servers, cloud platforms, and network infrastructure. Document risks associated with legacy systems and validate compensating controls when immediate remediation is not possible.
• Security Standards and Procedures: Develop and maintain incident response playbooks, technical standards, operational runbooks, and repeatable procedures to improve consistency, efficiency, and the quality of security operations.
• Identity and Access Management: Strengthen access controls through multifactor authentication, conditional access, privileged access management, joiner/mover/leaver processes, and periodic access reviews.
• Risk Assessments and Compliance: Coordinate annual security risk assessments, vulnerability assessments, and penetration tests aligned with HIPAA and NIST requirements. Track assessment findings, coordinate remediation, and communicate security risks and priorities to relevant stakeholders.
• Third-Party and Integration Security: Assess security risks associated with vendors, system integrations, newly onboarded locations, and acquired healthcare practices, ensuring that appropriate safeguards are implemented.
• Managed Security Partner Oversight: Act as the technical lead and primary day-to-day contact for managed service providers, managed security service providers, and managed detection and response partners. Evaluate service quality, validate investigations and deliverables, monitor contractual service-level agreements, and coordinate corrective actions when necessary.
• Team Leadership and Development: Lead, mentor, and develop a team of three security professionals by setting priorities, reviewing deliverables, strengthening technical capabilities, and providing guidance during complex investigations and remediation efforts.
• Automation and Continuous Improvement: Identify opportunities to streamline security workflows through PowerShell, Python, and other automation techniques, improving operational efficiency and the consistency of security controls.
• Risk Communication and Collaboration: Clearly communicate technical risks, operational priorities, incident findings, remediation progress, and recommendations to IT leadership, nontechnical decision-makers, and clinical stakeholders.
• Cross-Functional Security Support: Collaborate with internal IT teams and external partners to resolve operational challenges, strengthen security governance, and support the ongoing reliability of healthcare systems and services.

Requirements

• Education: A bachelor's degree in information security, computer science, or a related field is preferred.
• Professional Experience: At least eight years of experience in information security or security engineering, including hands‑on administration and operation of production security technologies.
• Leadership Experience: At least two years of experience leading, supervising, or mentoring security professionals, with the ability to establish priorities, develop team capabilities, and maintain accountability.
• Security Operations Expertise: Demonstrated experience overseeing managed service providers, managed security service providers, or managed detection and response partners, as well as leading security investigations and incident response activities.
• Security Technology Proficiency: Practical experience with SIEM/XDR platforms, vulnerability management tools, endpoint protection, email security, network security, cloud security, and privileged access management.
• Microsoft Security Environment: Experience securing Microsoft 365, Azure, and Entra ID, ideally combined with hands‑on familiarity with Rapid7 InsightIDR and InsightVM.
• Vulnerability Management: Strong understanding of vulnerability assessment, risk prioritization, patch management, remediation validation, and compensating controls for systems that cannot be immediately updated.
• Healthcare Security and Compliance: Knowledge of HIPAA, HITECH, and healthcare security frameworks, including HITRUST and the NIST Cybersecurity Framework.
• Identity and Access Security: Experience implementing and maintaining multifactor authentication, conditional access policies, privileged access controls, and identity lifecycle management processes.
• Scripting and Automation: Practical skills in PowerShell, Python, or similar technologies to automate security processes, improve workflows, and reduce manual operational effort.
• Risk Assessment and Governance: Ability to coordinate security assessments, interpret findings, track remediation activities, and translate technical vulnerabilities into actionable business priorities.
• Communication and Collaboration: Strong written and verbal communication skills, sound judgment, and the ability to explain complex security issues to both technical and nontechnical audiences.
• Problem-Solving and Adaptability: A proactive approach to identifying risks, investigating incidents, managing competing priorities, and implementing sustainable security improvements.
• Preferred Healthcare Experience: Previous experience in healthcare or a multisite healthcare organization, familiarity with electronic health record systems such as OncoEMR, and experience supporting mergers, acquisitions, or new‑site security integration.
• Preferred Certifications: CISSP, GIAC certifications such as GCIH, GCIA, or GSEC, CCSP, or relevant Microsoft security certifications.
• Work Environment: Ability to work effectively in a remote environment with a suitable home‑office setup. The role may require travel of up to 25%.

Benefits

• Competitive Compensation: Annual salary range of $104,200-$155,800, depending on qualifications, experience, and other relevant factors.
• Comprehensive Healthcare Coverage: Medical, dental, and vision insurance with access to a broad provider network.
• Retirement Savings: A 401(k) plan featuring a 100% company match, subject to the applicable plan terms, with a range of investment options.
• Paid Time Off: A generous paid time off program to support rest, personal commitments, and work‑life balance.
• Remote Work Flexibility: The opportunity to work remotely from the United States.
• Professional Development: Access to professional development programs and tuition assistance to support continued learning and career advancement.
• Career Growth Opportunities: An organizational focus on internal promotion and opportunities to expand technical expertise and leadership responsibilities.
• Professional Collaboration: Opportunities to participate in annual company summits and connect with colleagues and professionals across a national healthcare network.
• Meaningful Mission: Contribute to protecting sensitive patient information and maintaining secure, reliable technology that supports cancer care and clinical operations.
• Leadership Impact: Help shape enterprise security strategy, mentor security professionals, and drive improvements across a growing, distributed healthcare organization.