Security Operations Engineer

K Health; New York (NY); Hybrid; USD 125,000 - 150,000; Full time

Benefits offered by this job

Stock options

Paid parental leave

Hybrid work schedule

Health, dental, vision insurance

18 vacation days

Job summary

K Health in New York City seeks a Security Engineer to strengthen our healthcare tech ecosystem through hands-on SecOps and IT security initiatives. You will lead incident response, automate repeatable tasks, and collaborate with IT and engineering to safeguard patient data.

Reporting to the Director of Security, you will optimize endpoint security, manage tools like Sumo Logic and CrowdStrike, and support SOC2/HIPAA compliance in a fast-paced, hybrid environment.

Qualifications

• 3–5 years hands-on in Security Operations, IT Security, or System Administration with a security focus.
• Experience actively detecting, investigating, and remediating security incidents in cloud/hybrid environments.
• Deep IT background spanning endpoint administration (macOS/Windows), identity management, and network security.
• Demonstrated experience maintaining controls for SOC2 and/or HIPAA in an operational setting.
• Hands-on automation of security operations or IT tasks using SOAR, scripting or APIs.

Responsibilities

• Design, implement, and maintain hands-on SecOps workflows, threat detection, and incident response across corporate and cloud infrastructure.
• Build low-code and custom automations (Torq) to streamline security alerts, IT tasks, and triage.
• Administer and manage security tools (Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike).
• Maintain and support SOC2 and HIPAA security controls, participate in audits and evidence gathering.
• Partner with IT and engineering to harden systems, enforce zero-trust endpoint policies, secure employee workflows.
• Conduct root-cause analysis on incidents and implement preventative security measures.

Skills

Security Operations

Incident Response

Endpoint Management

SOC2/HIPAA Compliance

Automation Mindset

Tools

Sumo Logic

Jamf

Intune

Slack Enterprise

CrowdStrike

Torq

Job description

As a Security Engineer at K Health, you will serve as a foundational force in securing our healthcare technology ecosystem. Reporting directly to the Director of Security, this is a deeply hands-on individual contributor role focused primarily on Security Operations (SecOps) and IT Security projects. You will be responsible for building, automating, and maintaining our security controls while acting as a key responder to security incidents. If you thrive in a fast-paced environment where you are empowered to own your domain, automate repetitive tasks, and directly safeguard patient and organizational data, this role is for you.

What You Will Do

• Design, implement, and maintain hands-on SecOps workflows, threat detection, and incident response procedures across our corporate and cloud infrastructure.
• Build low-code and custom automations (using tools like Torq) to streamline security alerts, routine IT security tasks, and incident triage.
• Administer, optimize, and manage key security and endpoint management tools, including Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and related platforms.
• Maintain and support continuous compliance with SOC2 and HIPAA security controls, actively participating in audit preparation, evidence gathering, and control enforcement.
• Partner with cross-functional IT and engineering teams to harden systems, enforce zero-trust endpoint policies, and secure employee workflows.
• Conduct root-cause analysis on security incidents and proactively implement preventative security measures to eliminate recurring risks.

What We Are Looking For

• Experience: 3-5 years of dedicated hands-on experience in Security Operations, IT Security, or System Administration with a strong security focus.
• Incident Response: Proven background in actively detecting, investigating, and remediating security incidents in a modern cloud/hybrid environment.
• Technical Depth: Deep foundational IT background spanning endpoint administration (macOS/Windows), identity management, and network security.
• Compliance Standards: Demonstrated experience maintaining controls for SOC2 and/or HIPAA frameworks in an operational setting.
• Automation Mindset: Hands-on experience automating security operations or IT tasks using SOAR platforms, scripting (Python, PowerShell, Bash), or API integrations.

Bonus

• Direct experience implementing SOC2 or HIPAA controls from scratch or directly interfacing with external auditors.
• Hands-on familiarity with our specific technology stack: Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and Torq.
• Relevant industry certifications (e.g., Security+, Network+, GIAC, or vendor-specific platform certifications).
• Hybrid work schedule with weekly lunches and stocked fridges
• Monthly social committees for company events
• 18 vacation days, 9 company holidays, 5 sick days, and 2 personal days
• Stock options for every full-time employee
• Paid parental leave
• Competitive health, dental, and vision insurance options

Compensation:

$125,000 - $150,000 USD

Who We Are:

Behind every leading health system is K Health’s AI-powered virtual care engine.

Esteemed health systems like Mayo Clinic, Cedars-Sinai, Mass General Brigham, Hackensack Meridian Health, and Hartford Healthcare partner with K Health to build and run modern primary virtual care clinics on their behalf.

Our deeply integrated model modernizes the primary care loop by using AI to put humans first. For our patients, we offer clinical AI (i.e., PatientGPT) and unparalleled access to close care gaps around the clock. For our Providers, we deliver provider-serving agentic solutions (i.e., Perfect Note) to eliminate administrative overload and burnout. And for the health systems, we deploy our top-grade Virtualists in AI-powered virtual clinics 24/7 to capture the patients' care journeys at step one, retain the journey through the system for longitudinal care, and strengthen profitability.

We’re founded in 2016, headquartered in New York City, and backed by nearly $400 million from leading investors including Valor Equity Partners, Claure Group, Mangrove Capital Partners, 14W, Notable Capital, Lerer Hippeau, Primary Venture Partners, Comcast Ventures, PICO Venture Partners, Max Ventures, and other strategic healthcare partners.

We offer competitive compensation packages based on industry benchmarks for function, level, and geographic location. Offer amounts are determined by multiple factors such as a candidate's experience and expertise.

We are proud to be an Equal Opportunity Employer and consider applicants for employment regardless of race, ethnicity, religion, color, national origin, ancestry, disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, sexual orientation, pregnancy, childbirth and breastfeeding, age, citizenship, military or veteran status, or any other class protected by applicable federal, state, and local laws. We’re deeply committed to building teams as diverse as the patients we serve and strive to cultivate an environment where everyone can bring their most authentic self to work. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our users.