Senior Corporate Security Engineer

charliehealth; Nashville (TN); In loco; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Charlie Health is seeking a Senior Corporate Security Engineer to design, build, and operate security controls across our corporate environment, endpoints, SaaS platforms, and cloud services. The role emphasizes enterprise security, identity management, AI security, and secure-by-design practices.

You will collaborate with IT, Compliance, and Engineering teams to reduce risk, improve control maturity, and enable rapid, safe business growth in a highly regulated healthcare setting.

Competenze

• Senior hands-on security engineer with enterprise security expertise.
• Ability to design and implement technical security controls.

Mansioni

• Design, build and operate security controls across Charlie Health’s environment.
• Translate security requirements into reliable controls, automations and workflows.
• Partner with IT to embed secure-by-design practices in systems and integrations.
• Support Zero Trust and identity-centric control design across the org.
• Advise on security for AI tools and AI-enabled workflows.

Conoscenze

Enterprise security

Identity & access management

Endpoint security

SaaS security

Data protection

Security automation

Cloud security

Detection engineering

Zero Trust

AI security

Strumenti

SentinelOne

Wiz

Google Workspace

Okta

Jamf

Microsoft Intune

GitHub

Slack

Atlassian

CloudTrail

OpenAI

Anthropic

LiteLLM

Pillar

Descrizione del lavoro

Why Charlie Health?

Millions of people across the country are navigating mental health conditions, substance use disorders, and eating disorders, but too often, they’re met with barriers to care. From limited local options and long wait times to treatment that lacks personalization, behavioral healthcare can leave people feeling unseen and unsupported.

Charlie Health exists to change that. Our mission is to connect the world to life-saving behavioral health treatment. We deliver personalized, virtual care rooted in connection-between clients and clinicians, care teams, loved ones, and the communities that support them. By focusing on people with complex needs, we’re expanding access to meaningful care and driving better outcomes from the comfort of home.

As a rapidly growing organization, we’re reaching more communities every day and building a team that’s redefining what behavioral health treatment can look like. If you’re ready to use your skills to drive lasting change and help more people access the care they deserve, we’d love to meet you.

About the Role

The Senior Corporate Security Engineer role is responsible for designing, building and operating the technical security systems and controls that protect Charlie Health’s corporate environment, workforce systems, endpoints, SaaS platforms, cloud-connected services and internal operations.

This is a senior hands‑on security engineering role requiring expertise in enterprise security, identity and access management, endpoint security, SaaS security, data protection, security automation, cloud security and detection engineering. The Corporate Security Engineer will partner closely with IT Engineering, Information Security, Compliance, Engineering and business teams to reduce risk, improve control maturity and support Charlie Health’s continued growth.

Our IT and Information Security organizations treat security as an engineering discipline. We value ownership, measurable outcomes, automation, reliability, secure‑by‑design implementation and continuous improvement. The Corporate Security Engineer will build scalable security capabilities that protect sensitive company, employee, clinician and patient data while enabling the business to move quickly and safely.

Charlie Health is also building an AI‑native operating model. This role will help secure the enterprise use of AI tools, LLM platforms, AI‑enabled workflows and emerging AI security products. The ideal candidate is excited to work with tools and platforms such as OpenAI, Anthropic, LiteLLM, Prompt Security, Pillar and other AI security technologies, while helping define practical controls for safe and responsible AI adoption.

Charlie Health operates in a highly regulated healthcare environment. This role will support security controls aligned to HIPAA, SOC 2, NIST, Zero Trust principles and other applicable regulatory and contractual requirements.

Responsibilities

Security Engineering & Control Design

• Design, build and operate technical security controls across Charlie Health’s corporate technology environment
• Engineer scalable security solutions for identity, endpoints, SaaS platforms, cloud-connected services, collaboration tools and internal systems
• Translate security requirements into reliable technical controls, automations, detections and operational workflows
• Partner with IT Engineering to embed secure‑by‑design practices into enterprise systems, integrations and infrastructure
• Establish control patterns that improve security posture, operational efficiency, auditability and resilience

Identity, Access Control & Zero Trust

• Design and improve identity and access controls across workforce systems, SaaS applications and privileged access workflows
• Implement and mature controls for MFA, conditional access, device trust, role‑based access, least privilege, service accounts and lifecycle automation
• Partner with IT and business teams to improve joiner, mover, leaver, access review and elevated access processes
• Help advance Charlie Health’s Zero Trust strategy through identity‑centric control design, continuous verification and measurable trust signals

Endpoint, SaaS & Cloud Security

• Engineer and improve security controls across Mac, Windows, mobile and BYOD environments
• Partner with endpoint engineering teams to improve secure configuration baselines, MDM policy, EDR coverage, device compliance and vulnerability remediation
• Assess and improve the security posture of corporate SaaS platforms, integrations, APIs and service accounts
• Configure and operationalize security tooling across platforms such as SentinelOne, Wiz, Google Workspace, Okta, Jamf, Microsoft Intune, GitHub, Slack, Atlassian and related systems
• Support cloud security visibility and control implementation across AWS and related services, including use of CloudTrail and other telemetry sources

Detection, Response & Security Operations

• Build and improve detections, alerts, dashboards, runbooks and response wor