Lead Security Engineer — Remote, Cloud & Incident Response

American Oncology Network, Inc.; Fort Myers (FL); Remote; USD 104,000 - 156,000; Full time

Benefits offered by this job

Remote position

Flexible hours

Ergonomic home office guidance

Job summary

American Oncology Network, Inc. is seeking a Lead Security Engineer to provide hands-on technical leadership for the enterprise security program across a distributed healthcare environment.

You will oversee security tools, configurations, monitoring, vulnerability management, incident response, and managed security service partners. Reporting to the Director of IT Security, you will lead a team of three security staff, strengthen protection of patient information and clinical operations, and

Qualifications

• Bachelor’s degree in information security, Computer Science or related field preferred.
• 8+ years of information security or security engineering experience, including hands-on operation of production security tools.
• 2+ years leading or mentoring security staff.
• Experience overseeing MSP, MSSP, or MDR providers; leading security investigations; and administering SIEM/XDR and vulnerability management technologies.
• Knowledge of HIPAA, HITECH, and healthcare security frameworks (HITRUST, NIST CSF).
• Practical experience with endpoint, email, network, cloud, and privileged access security, including Microsoft 365, Azure, Entra ID, Rapid7 InsightIDR and InsightVM.
• Preferred: Healthcare or multisite provider experience, EHR familiarity (e.g., OncoEMR), and M&A or new-site security integration.

Responsibilities

• Own and administer the security technology stack, including SIEM/SOAR, endpoint protection, email security, privileged access management, and secure network access.
• Maintain and optimize Rapid7 InsightIDR, InsightVM and InsightConnect, Bitdefender GravityZone, Mimecast, Delinea Secret Server, and Cato security configurations and coverage.
• Secure Microsoft 365, Azure and other cloud/SaaS environments by establishing configuration baselines and monitoring security posture.
• Manage security tool licensing, coverage, and renewal inputs to maintain appropriate protection and cost-effective utilization.
• Lead security event triage and incident investigations in partnership with the managed detection and response provider; coordinate containment, recovery, and post-incident reviews.
• Oversee vulnerability scanning, prioritization, remediation, and patch management across endpoints, servers, cloud platforms, and network infrastructure.
• Document risks associated with legacy systems and validate compensating controls where timely remediation is not feasible.
• Develop response runbooks, technical standards, and repeatable procedures to support consistent security operations.
• Strengthen identity and access security through multifactor authentication, conditional access, privileged access management, joiner/mover/leaver controls, and periodic access reviews.
• Coordinate annual HIPAA- and NIST-aligned security risk assessments, vulnerability assessments, and penetration tests with external assessment partners.
• Track and drive remediation of assessment findings and security gaps, communicating technical risks and priorities to stakeholders.
• Assess security risks arising from third-party vendors, integrations, newly onboarded sites, and acquired practices.
• Serve as the technical lead and primary day-to-day accountability point for managed service and security partners, including ATG and Rapid7 MDR.
• Validate provider deliverables, service quality, investigation work, and adherence to contractual service-level agreements.
• Escalate gaps and coordinate corrective action with internal IT stakeholders and external partners.
• Promote clear documentation, ownership, and communication across security operations and partner workflows.
• Lead, mentor, and develop security staff by establishing priorities, reviewing deliverable quality, and building technical capabilities.
• Provide practical guidance during complex security investigations, remediation activities, and operational issues.
• Identify opportunities to improve security workflows through PowerShell, Python, and other scripting or automation methods.
• Communicate security risks, operational priorities, and remediation progress clearly to nontechnical leaders and clinical stakeholders.

Skills

Security Engineering

Incident Response

Vulnerability Management

Identity and Access Management

Cloud Security

Vendor Oversight

Security Compliance

Team Leadership

Scripting and Automation

Technical Risk Communication

Education

Bachelor’s degree in information security or related field

Tools

Rapid7 InsightIDR

InsightVM

InsightConnect

Bitdefender GravityZone

Mimecast

Delinea Secret Server

Cato

Microsoft 365

Azure

Entra ID

Job description

American Oncology Network, Inc. is seeking a Lead Security Engineer to provide hands-on technical leadership for the enterprise security program across a distributed healthcare environment.

You will oversee security tools, configurations, monitoring, vulnerability management, incident response, and managed security service partners. Reporting to the Director of IT Security, you will lead a team of three security staff, strengthen protection of patient information and clinical operations, and