Security Operations Engineer — Automate, Detect & Defend

K Health; New York, Northern (NY, KY); Hybrid; USD 125,000 - 150,000; Full time

Benefits offered by this job

Stock options

Paid parental leave

Health, dental, and vision insurance

Job summary

K Health is seeking a Security Engineer in New York to own hands-on SecOps, incident response, and IT security projects across our cloud and on-premise infrastructure. You will build, automate, and maintain security controls while safeguarding patient and organizational data.

Reporting to the Director of Security, you will deploy tools like Sumo Logic, Jamf, Intune, CrowdStrike, and Torq, drive SOC2 and HIPAA compliance, and partner with IT and engineering to harden environments and enforce

Qualifications

• Hands-on security operations experience.
• Experience maintaining SOC2 and HIPAA controls.
• Experience securing cloud/hybrid environments.
• Ability to automate security tasks and responses.

Responsibilities

• Design, implement, and maintain SecOps workflows, threat detection, and incident response.
• Build low-code automations to streamline security alerts and IT security tasks.
• Administer and optimize key security tools (Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike).
• Ensure ongoing SOC2 and HIPAA compliance, supporting audits and evidence gathering.
• Collaborate with IT and engineering to harden systems and enforce zero-trust policies.
• Perform root-cause analysis on incidents and implement preventative measures.

Skills

Security operations

Incident response

Automation scripting

Endpoint security

SOC2 HIPAA

Tools

Sumo Logic

Jamf

Intune

Slack Enterprise

CrowdStrike

Torq

Job description

K Health is seeking a Security Engineer in New York to own hands-on SecOps, incident response, and IT security projects across our cloud and on-premise infrastructure. You will build, automate, and maintain security controls while safeguarding patient and organizational data.

Reporting to the Director of Security, you will deploy tools like Sumo Logic, Jamf, Intune, CrowdStrike, and Torq, drive SOC2 and HIPAA compliance, and partner with IT and engineering to harden environments and enforce