Senior Security Engineer

Cambridge Health Alliance; Cambridge (MA); On-site; USD 95,000 - 130,000; Full time

Job summary

Cambridge Health Alliance is seeking a Senior Security Engineer to protect its digital landscape. This role combines technical expertise in Palo Alto Next-Generation Firewalls while leading a dedicated security engineering team.

The successful candidate will design and execute security strategies, manage cloud security, and oversee vulnerability management to ensure patient data integrity. Educational qualifications include a Bachelor’s degree in Computer Science or Cyber Security and relevant certifications preferred.

Qualifications

• 7-10 years of experience with Palo Alto Firewalls and Global Protect.
• Expert-level management of security protocols within Google Workspace.
• Proven experience managing security for Google Cloud Platform (GCP) and Microsoft Azure.

Responsibilities

• Lead the security engineering team and provide technical guidance.
• Design and execute a security strategy aligning with CHA's mission.
• Oversee enterprise-wide scanning and vulnerability management.

Skills

Palo Alto Firewall management

Cloud security management

Team leadership

Vulnerability management

Identity & access management

Education

Bachelor’s degree in Computer Science or Cyber Security

Tools

Palo Alto Next-Generation Firewalls

Rapid 7

Google Workspace

Job description

The Senior Security Engineer serves as a critical guardian of CHA’s digital landscape. This role combines high-level technical expertise in Palo Alto Next-Generation Firewalls (NGFW), guiding a three-person security engineering team to ensure the confidentiality, integrity, and availability of patient data across our hybrid-cloud healthcare environment.

• Team Leadership: mentor a specialized three-person security engineering team; provide technical guidance, and foster a culture of proactive threat hunting.
• Security Roadmap: Partner with IT leadership to design and execute a security strategy that aligns with CHA’s clinical mission and protects high-priority systems.
• Palo Alto Infrastructure Management: Act as the primary architect for the Palo Alto security stack, including GlobalProtect VPN for remote access, Panorama, WildFire, and advanced Threat Prevention.
• Network Micro-segmentation: Design and maintain strict security boundaries for on-premises systems, specifically ensuring the isolation and security of critical clinical tools.
• Vulnerability Management: Oversee enterprise-wide scanning and remediation efforts using Rapid 7 to protect CHA’s diverse endpoint and server environment.

CHA operates a complex hybrid environment. The candidate must demonstrate advanced proficiency in securing:

• Public Cloud & SaaS Interfaces: Manage and audit security for cloud-hosted applications and Daily Productivity tools.
• Google Workspace Security: Expert-level management of security protocols within Google Workspace (Gmail, Drive, Meet) and Virtru email encryption to prevent data exfiltration.
• Vendor Connectivity (SFTP/VPN): Secure and monitor high-volume data transmissions via SFTP and specialized vendor tunnels for partners.
• Identity & Access Management: Oversee secure authentication to ensure only authorized personnel access clinical systems.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Cyber Security, or a related field.
• Certifications: CISSP is preferred. PCNSE (Palo Alto Networks Certified Network Security Engineer) preferred.
• Technical Stack Experience: 7-10 years of experience with Palo Alto Firewalls and Global Protect.
• Proven experience managing security for Google Cloud Platform (GCP) and Microsoft Azure/Office 365.
• Proficiency in securing complex healthcare interfaces.