Senior Security Engineer

RSi; Mission (KS); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive pay

Fully remote with Mon–Fri schedule

Growth opportunities

Job summary

RSi, a healthcare revenue cycle management company, seeks a Senior Security Engineer to lead day-to-day security operations in a hybrid cloud environment (Azure/AWS) and protect PHI and payment data. The role reports to the CIO and demands hands-on expertise across EDR, IAM, SIEM, and vulnerability management.

You will partner with DevOps to integrate security into CI/CD and IaC, lead incident response, and ensure compliance with HIPAA, PCI-DSS, and SOC 2.

Qualifications

• 7+ years in security engineering, with at least 3 in a senior or lead role.
• Hands-on NinjaOne experience, or a comparable enterprise RMM platform.
• Real operational time in Rapid7 InsightVM and InsightIDR — tuning, reporting, workflow.
• Solid Azure security skills: Defender for Cloud, Sentinel, Entra ID, Key Vault, Azure Policy.
• Working knowledge of AWS security: GuardDuty, Security Hub, IAM, CloudTrail, KMS.
• Experience securing a Microsoft 365 tenant, including Defender for Office 365.
• PowerShell scripting. Python or KQL is a plus.
• HIPAA or similar regulated‑industry background.
• You can write clearly and hold your ground in front of non-technical executives.
• CISSP, CCSP, GCIH, AZ‑500, SC‑200, or AWS Certified Security – Specialty.
• Healthcare RCM experience, or familiarity with Latitude by Genesis.
• Time spent on GenAI or LLM security — data loss prevention, prompt and output governance.
• SOC 2 or HITRUST audit history.

Responsibilities

• Run NinjaOne for RMM, patching, and endpoint hygiene across the workforce.
• Administer EDR coverage on Windows, macOS, and server workloads.
• Work with Infrastructure on Entra ID security — conditional access, PIM, MFA, Defender for Identity.
• Keep least-privilege honest across on-prem AD, Entra ID, and our federated SaaS.
• Own Rapid7 InsightVM and InsightIDR as our primary vulnerability and SIEM platform.
• Run vulnerability management end to end: scanning, prioritization, SLAs, exceptions, executive reporting.
• Tune detections, triage alerts, and lead investigations.
• Coordinate pen tests and chase the remediation through to close.
• Configure Microsoft Defender for Cloud and Sentinel; integrate signal with Rapid7 where it makes sense.
• Administer AWS-native tooling: GuardDuty, Security Hub, IAM Access Analyzer, CloudTrail, Config, KMS.

Skills

Security engineering

Lead role

Scripting (PowerShell)

Python

Clear communication

Education

CISSP, CCSP, or AWS Certified Security – Specialty

Tools

NinjaOne

Rapid7 InsightVM

InsightIDR

Azure Defender for Cloud

Azure Sentinel

Entra ID

Defender for Cloud

GuardDuty

Job description

Explore our on-site and remote revenue cycle management jobs.
At RSi, your revenue cycle career can grow in a workplace where talented people collaborate, and thrive together.
We believe in a culture driven by sharp, committed, and enthusiastic employees, and giving high-growth individuals the autonomy to perform.
Our current open positions are linked below. Are you the next member of our team?

Did you know? At least 1/3 of all RSi new hires come from internal referrals.

Position:Senior Security Engineer

Location: Remote

Remote Status: Hybrid

Job Id:326

# of Openings:1

Senior Security Engineer

| Schedule: Monday–Friday, 8am–5pm EST | Location: Remote

Work Where Excellence is Recognized

At RSi, we've proudly served healthcare providers for over 20 years, earning recognition as a "Best in KLAS" revenue cycle management firm and a USA Today Top 100 Workplace. Our reputation is built on delivering exceptional financial results for healthcare providers—and an unbeatable work culture for our team. We seek high-performing individuals willing to join our sharp, committed, and enthusiastic team. Here, your performance is valued, your growth is prioritized, and your contributions make a meaningful impact every day.

RSi is a healthcare revenue cycle management company. We handle PHI and payment data for hospitals and health systems across the country, which means security has to be right. We're looking for a Senior Security Engineer to run the technical side of the program day to day.This is an individual contributor role reporting to the CIO. You'll have direct access to leadership and real influence over where the program goes. You'll also be accountable for the work — the toolset, the detections, the posture, the incident calls when something goes wrong.The environment is hybrid cloud — Azure and AWS, a Microsoft-heavy identity stack, Latitude as the core RCM platform, Microsoft 365, and a growing footprint of automation and generative AI in the business. HIPAA, PCI-DSS, and SOC 2 are all in play.

What You'll Do:

• Run NinjaOne for RMM, patching, and endpoint hygiene across the workforce.
• Administer EDR coverage on Windows, macOS, and server workloads.
• Work with Infrastructure on Entra ID security — conditional access, PIM, MFA, Defender for Identity.
• Keep least-privilege honest across on-prem AD, Entra ID, and our federated SaaS.
• Own Rapid7 InsightVM and InsightIDR as our primary vulnerability and SIEM platform.
• Run vulnerability management end to end: scanning, prioritization, SLAs, exceptions, executive reporting.
• Tune detections, triage alerts, and lead investigations.
• Coordinate pen tests and chase the remediation through to close.
• Configure Microsoft Defender for Cloud and Sentinel; integrate signal with Rapid7 where it makes sense.
• Administer AWS-native tooling: GuardDuty, Security Hub, IAM Access Analyzer, CloudTrail, Config, KMS.
• Partner with DevOps to pull security into CI/CD and IaC reviews rather than bolt it on after.
• Lead containment, eradication, and recovery when we have a security incident.
• Keep the IR plan current and run tabletops with IT and executive stakeholders.
• Maintain detection coverage mapped to MITRE ATT&CK.
• Handle forensic collection in a way that holds up in a HIPAA environment.
• Evidence controls for HIPAA, PCI-DSS, SOC 2, and client security questionnaires.
• Support our NIST CSF and NIST AI RMF alignment, including the GenAI program.
• Help with third-party risk reviews for vendors, clients, and acquired entities.
• Write the policies and runbooks. Keep them usable.

What We're Looking For:

• 7+ years in security engineering, with at least 3 in a senior or lead role.
• Hands-on NinjaOne experience, or a comparable enterprise RMM platform.
• Real operational time in Rapid7 InsightVM and InsightIDR — tuning, reporting, workflow.
• Solid Azure security skills: Defender for Cloud, Sentinel, Entra ID, Key Vault, Azure Policy.
• Working knowledge of AWS security: GuardDuty, Security Hub, IAM, CloudTrail, KMS.
• Experience securing a Microsoft 365 tenant, including Defender for Office 365.
• PowerShell scripting. Python or KQL is a plus.
• HIPAA or similar regulated‑industry background.
• You can write clearly and hold your ground in front of non-technical executives.
• CISSP, CCSP, GCIH, AZ‑500, SC‑200, or AWS Certified Security – Specialty.
• Healthcare RCM experience, or familiarity with Latitude by Genesis.
• Time spent on GenAI or LLM security — data loss prevention, prompt and output governance.
• SOC 2 or HITRUST audit history.

Why You'll Love RSi:

• Competitive pay with ample opportunities for professional growth.
• Fully remote position with a stable Monday–Friday schedule.
• Collaborative, performance-driven environment with expert leadership.
• Mission-driven work supporting essential healthcare services.
• Recognition as a nationally respected leader in healthcare revenue management.

Physical Requirements:

• Comfortable working at a computer for extended periods.
• Ability to occasionally lift items weighing up to 15 pounds.

What to Expect When You Apply:

Our hiring process is designed to find exceptional candidates. Once your application is received, you'll receive an invitation to complete an initial skills assessment. This step is essential: completing this assessment promptly positions you for an interview and demonstrates your commitment to excellence.

We believe in creating exceptional teams, and this process ensures that every member at RSi has the opportunity to thrive and grow.

• 2024–2026 Top Workplaces National Culture Excellence
• 2025 Remote Employer Top Workplaces

ACA International

Many of our leaders are active members of ACA International and regularly attend ACA conferences, engage in industry‑leading discussions, and serve on key committees to help shape best practices and policies.

AAPC Corporate Member

RSi is proud to be an AAPC Corporate Member. Through this membership, up to 40 team members gain exclusive access to industry‑leading resources, including discounted certification exams, the Codify tool for enhanced coding accuracy, and free continuing education opportunities.

RSi is committed to selecting and employing qualified individuals while fostering an inclusive and equitable workplace. RSi strictly prohibits discrimination in all employment practices, including recruitment, hiring, training, promotion, termination, compensation, and other terms, conditions, or privileges of employment, based on race, color, gender, pregnancy, national origin, religion, age, disability, or any other protected characteristic as defined by law. Reasonable accommodations will be provided to qualified individuals with legally recognized disabilities, unless doing so would impose an undue hardship or create a direct threat to the safety of the workplace or operations. RSi maintains a zero-tolerance policy for discriminatory or unfavorable speech or actions related to age, disability, race, color, gender, pregnancy, religion, national origin, or any other protected characteristic. This applies to interactions with employees, contractors, vendors, clients, and all others affiliated with RSi. Such behavior will not be tolerated and may result in disciplinary action up to and including termination.