Senior Cyber Security Engineer

RLDatix; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401K

Paid time off

Paid holidays

Job summary

RLDatix is seeking a Senior Cyber Security Engineer to own the day-to-day security posture of our cloud-based SaaS solutions in healthcare and the Microsoft 365 environment that supports them. This hands-on role focuses on vulnerability management, incident response, cloud and endpoint hardening, and evidence for HITRUST and HIPAA compliance.

You’ll lead vulnerability management across Azure and SaaS, strengthen protection controls, coordinate incident investigations, and partner with

Qualifications

• 5+ years in cybersecurity engineering or related role.
• Experience leading vulnerability programs and incident response.
• Knowledge of HITRUST, HIPAA, NIST CSF/800-53, ISO 27001, SOC 2.
• Willingness to travel occasionally within the United States.
• Interest in protecting healthcare data and patient safety.
• Ability to work remotely within the United States.

Responsibilities

• Lead vulnerability management across Azure, M365, and SaaS to reduce exposure.
• Strengthen cloud, endpoint, identity, and data protection controls.
• Coordinate incident response for ransomware, phishing, and account compromise.
• Collaborate with Engineering, DevOps, Privacy, and Infra to implement secure controls.
• Manage HITRUST, HIPAA, and NIST-aligned initiatives; support audits and risk programs.

Skills

Vulnerability management

Incident response

Cloud security

Regulatory compliance

Cross-functional collaboration

Security assessments

Education

CISSP or equivalent certifications

Tools

Azure

Microsoft 365

Entra ID

Defender

Sentinel

Intune

Purview

Conditional Access

Job description

Job Description

RLDatix (RLD) is on a mission to help raise the standard of care…everywhere. Trusted by over 10,000 healthcare organizations around the world, our solutions help improve health and care. Our applications ensure that patients receive the best and safest care while supporting the providers who deliver it.

Joining TeamRLD means being part of a global effort of over 2,000 team members in making a difference in healthcare…every day.

We’re searching for a Senior Cyber Security Engineer to join our team. In this role, you will own and mature the day-to-day security posture of our cloud-based SaaS solutions in the healthcare space—and the Microsoft 365 environment that supports them. This is a hands-on engineering and advisory role responsible for vulnerability management, incident response, cloud and endpoint hardening, and the compliance evidence that keeps our HITRUST CSF certification and HIPAA obligations current.

How You’ll Spend Your Time

• Lead vulnerability management activities across Azure, Microsoft 365, and SaaS environments to identify risks, prioritize remediation efforts, and reduce organizational exposure.
• Monitor and strengthen cloud, endpoint, identity, and data protection controls in order to proactively defend against evolving cyber threats.
• Coordinate incident response activities, including ransomware, phishing, account compromise, and business email compromise investigations to minimize operational and security impacts.
• Partner with Engineering, DevOps, Privacy, and Infrastructure teams to implement secure configurations, logging, monitoring, and compliance-focused controls.
• Manage HITRUST, HIPAA, and NIST-aligned security initiatives while supporting customer security reviews, audit activities, governance documentation, and risk management programs.

What Kind of Things We’re Most Interested in You Having

• 5+ years of experience in cybersecurity engineering, security operations, security consulting, or a related information security role.
• Proven success leading vulnerability management programs, security remediation efforts, and incident response investigations from triage through resolution.
• In-depth knowledge of cybersecurity frameworks and regulatory requirements, including HITRUST, HIPAA, NIST CSF, NIST 800-53, ISO 27001, SOC 2, or similar standards.
• Ability to work remotely within the United States and travel occasionally as business needs require.
• Sincere interest in protecting healthcare data, advancing security best practices, and supporting patient safety through technology.
• A knack for working collaboratively across technical and business teams within a fast-paced, highly regulated healthcare technology environment.

Preferred Qualifications

• Experience securing Microsoft Azure and Microsoft 365 environments, including Entra ID, Defender, Sentinel, Intune, Purview, and Conditional Access.
• Experience developing automation and operational efficiencies using PowerShell and/or Python.
• Experience maintaining or preparing for HITRUST certification assessments.
• Experience completing customer security assessments, including SIG, CAIQ, HECVAT, and healthcare-specific security questionnaires.
• CISSP preferred; Security+, CCSP, CISA, HITRUST CCSFP, Azure Security Engineer, or similar certifications are a plus.

By enabling flexibility in how we work and prioritizing employee wellness, we empower our team to do and be their best. Our benefits package includes health, dental, vision, life, disability insurance, 401K, paid time off, and paid holidays.

RLDatix is an equal opportunity employer, and our employment decisions are made without regard to race, color, religion, age, gender, national origin, disability, handicap, marital status or any other status or condition protected by Federal and/or State laws.

As part of RLDatix’s commitment to the inclusion of all qualified individuals, we ensure that persons with disabilities are provided reasonable accommodation in the job application and interview process. If reasonable accommodation is needed to participate in either step, please don’t hesitate to send a note to [e-mail].

Salary offers are based on a wide range of factors including location, relevant skills, training, experience, education, and, where applicable, licensure or certifications obtained. Market and organizational factors are also taken into consideration.