Security Engineer

Openkrill; United States; Remote; USD 100,000 - 135,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with 4% match

HSA and FSA

Job summary

Imagine Pediatrics is seeking a Security Engineer to protect systems, data, and patients across cloud, endpoint, identity, and application security tooling. You will work closely with a Senior Security Engineer in a collaborative environment, shaping security initiatives from design to validation.

The role emphasizes cloud security in AWS/Azure, incident response, and governance with HITRUST/HIPAA. You will help implement controls, runbooks, and continuous improvement across the stack.

Qualifications

• Bachelor's degree in CS/Info Security/Related preferred.
• Certifications: AWS Security – Specialty, AWS Solutions Architect – Associate, GIAC, Security+, CySA+, CEH, CISSP.
• 3+ years in information security roles, healthcare preferred.
• Experience using AI tools to enhance security processes.
• Experience managing HITRUST and HIPAA requirements with auditors.
• Knowledge of AWS, Intune, EntraID, JAMF, Meraki, and JIRA Service Management.
• Strong diagnostic and problem-solving abilities; able to innovate in fast-paced environments.
• Understanding of access control, encryption, data confidentiality, business continuity, vulnerability scans, and cloud services.
• Proven track record delivering security projects within scope, deliverables, and timeframe.
• Ability to lead security incident responses and data breach remediation.

Responsibilities

• Collaborate with Senior Security Engineer to scope and implement security initiatives.
• Peer review security configurations, policies, and automation; contribute to runbooks and design decisions.
• Administer and tune core security platforms across endpoint, device compliance, email security, cloud access, and vulnerability management.
• Support security of cloud infrastructure in Azure/EntraID and AWS; manage IAM, logging, monitoring, network controls, encryption, and baselines.
• Respond to alerts and escalations from MDR and other security systems; participate in on-call rotation.
• Interpret logs from IT, security, and cloud infra; route telemetry into centralized logging/SIEM.
• Ensure configurations align with HITRUST, NIST, CIS Benchmarks, HIPAA, OWASP Top 10.
• Translate framework requirements into technical controls for new systems and services as the company grows.
• Create, implement, and test incident response procedures for new threat content and alerts.
• Respond to and resolve cyber security threats impacting confidentiality, integrity, or availability.
• Use AI tooling to reduce manual effort in log review, documentation, scripting, and alert triage.
• Ensure security initiatives align with program objectives and policies.
• Exercise discretion when handling sensitive personal data.
• Perform other duties as assigned.

Skills

Security engineering

Cloud security

Incident response

On-call readiness

AI tooling in security

Education

Bachelor of Science in Computer Science/Info Security/Related

Tools

AWS

Azure/EntraID

Intune

JAMF

Meraki

JIRA Service Management

Job description

Who We Are

Imagine Pediatrics is a tech enabled, pediatrician led medical group reimagining care for children with special health care needs. We deliver 24/7 virtual first and in home medical, behavioral, and social care, working alongside families, providers, and health plans to break down barriers to quality care. We do not replace existing care teams; we enhance them, providing an extra layer of support with compassion, creativity, and an unwavering commitment to children with medical complexity.

What You’ll Do

As a Security Engineer, you will help operate, tune, and improve the technologies and processes that protect Imagine Pediatrics’ systems, data, and patients from cyber security threats. You will work hands-on across our cloud, endpoint, identity, and application security tooling as part of a small, collaborative security team that values curiosity as much as credentials.

You will partner day to day with our Senior Security Engineer. This is a genuinely collaborative pairing rather than a hand-off of tickets: you will brainstorm together, whiteboard approaches, pressure-test each other’s thinking, and jointly own the outcome of what you build. We expect you to bring ideas and push back when something doesn’t look right.

You will:

• Collaborate closely with the Senior Security Engineer to scope, design, and solution security initiatives, from early brainstorming through implementation and validation
• Participate in peer review of security configurations, policies, and automation, and contribute to shared documentation, runbooks, and design decisions
• Administer and tune core security platforms across endpoint detection and response, endpoint management and device compliance, email security, cloud access and network traffic monitoring, data loss prevention, and vulnerability management
• Support the security of our cloud infrastructure in Microsoft Azure/EntraID and Amazon Web Services (AWS), including identity and access management, logging and monitoring, network controls, encryption and key management, and configuration baselines
• Respond to alerts and escalations from our managed detection and response (MDR) provider and other security systems as part of the on-call rotation
• Interpret log outputs from a wide selection of IT, security, and cloud infrastructure, and help route the right telemetry into our centralized logging and SIEM solution
• Ensure configurations and deployments are aligned with relevant industry standards such as HITRUST, NIST, CIS Benchmarks, HIPAA, and the OWASP Top 10
• Translate framework requirements into practical technical controls, and apply them to new systems, cloud accounts, and services as the company grows rather than retrofitting them later
• Create, implement, and test incident response procedures for new threat content and alerts
• Respond to and resolve cyber security threats that may impact the confidentiality, integrity, or availability of Imagine Pediatrics systems and personnel
• Use AI tooling thoughtfully to reduce manual effort in areas such as log review, documentation, evidence preparation, scripting, and alert triage
• Ensure security control initiatives are executed on schedule and in line with Imagine Pediatrics Information Security program objectives and corporate policies
• Apply professional discretion and judgement when viewing sensitive and personal data or information in the process of conducting work
• Other duties as assigned

What You Bring & How You Qualify

First and foremost, you’re passionate and committed to reimagining pediatric health care and creating a world where every child with complex medical conditions gets the care and support they deserve.

• Bachelor of Science degree in Computer Science, Information Security, Business, Management, or a related field is preferred
• Relevant license(s) or certification(s): AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, GIAC, Security+, CySA+, CEH, CISSP.
• 3+ years of experience as an Information Security Analyst, Risk Analyst, Security Engineer, Information Security Engineer, or similar role, ideally with 2 of those 3+ years within the healthcare industry
• Experience using Artificial Intelligence (AI) tools to enhance and automate security processes and procedures
• Experience managing HITRUST and HIPAA requirements and working with auditors
• Knowledge of IT systems such as AWS, Microsoft Intune, EntraID, JAMF, Meraki, and JIRA Service Management
• Strong diagnostic and problem-solving abilities, and an ability to innovate and grow knowledge in a fast-paced environment
• Comfortable working knowledge of key technology concepts such as access control, confidential data, encryption, business continuity, information security vulnerability scans, and cloud services
• Proven history executing business impact projects within defined scope, deliverables, and timeframe
• Ability to remain calm and lead the technical response to security incidents and data breaches

What We Offer (Benefits + Perks)

The role offers a base salary range of $100,000 - $135,000 in addition to annual bonus incentive, competitive company benefits package and eligibility to participate in an employee equity purchase program (as applicable). When determining compensation, we analyze and carefully consider several factors including job-related knowledge, skills and experience. These considerations may cause your compensation to vary.

We provide these additional benefits and perks:

• Competitive medical, dental, and vision insurance
• Healthcare and Dependent Care FSA; Company-funded HSA
• 401(k) with 4% match, vested 100% from day one
• Employer-paid short and long-term disability
• Life insurance at 1x annual salary
• 20 days PTO + 10 Company Holidays & 2 Floating Holidays
• Paid new parent leave
• Additional benefits to be detailed in offer

What We Live By

We’re guided by our five core values:

Our Values:

• Children First. We put the best interests of children above all. We know that the right decision is always the one that creates more safe days at home for the children we serve today and in the future.
• Earn Trust. We listen first, speak second. We build lasting relationships by creating shared understanding and consistently following through on our commitments.
• Innovate Today. We believe that small improvements lead to big impact. We stay curious by asking questions and leveraging new ideas to learn and scale.
• Embrace Humanity. We lead with empathy and authenticity, presuming competence and good intentions. When we stumble, we use the opportunity to grow and understand how we can improve.
• One Team, Diverse Perspectives. We actively seek a range of viewpoints to achieve better outcomes. Even when we see things differently, we stay aligned on our shared mission and support one another to move forward — together.

We Value Diversity, Equity, Inclusion and Belonging

We believe that creating a world where every child with complex medical conditions gets the care and support, they deserve requires a diverse team with diverse perspectives. We're proud to be an equal opportunity employer. People seeking employment at Imagine Pediatrics are considered without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, marital or veteran status, age, national origin, ancestry, citizenship, physical or mental disability, medical condition, genetic information, or characteristics (or those of a family member), pregnancy or other status protected by applicable law.