Senior Security Engineer — Hybrid, Cloud & Incident Response Lead

HealthDrive; Framingham (MA); Hybrid; USD 85,000 - 115,000; Full time

Job summary

HealthDrive in Framingham, MA is seeking a Senior Security Engineer to own day‑to‑day security operations and cloud configuration.

This hands‑on role drives phishing handling, email security, DLP and endpoint detections, coordinates with managed providers, and leads remediation efforts. The position offers a hybrid schedule and a compensation range of $85,000 to $115,000, dependent on experience.

Qualifications

• Seven or more years of hands-on security engineering/operations experience.
• Hands-on ownership of email security and data loss prevention (Proofpoint preferred).
• Configuring and securing Microsoft Entra ID and Microsoft 365, including CA design.
• Ownership of vulnerability management and remediation across teams.
• Experience with EDR platforms and SIEM output; avoid false positives.
• Incident response experience with containment decisions and coordination with providers.
• Experience overseeing managed security service providers.

Responsibilities

• Triage, investigate and resolve phishing and email-borne threats.
• Monitor and tune email security and DLP policy; investigate DLP events involving PHI.
• Own escalations from managed detection provider, from receipt to containment.
• Manage vulnerability remediation across Infrastructure and Development teams.
• Configure and harden Microsoft Entra ID and 365 security settings.
• Oversee provider relationships, reviews and performance.

Skills

Security engineering

Email security

Microsoft Entra ID

Microsoft 365

Vulnerability management

EDR / SIEM

Incident response

Managed security providers

Fortinet

PowerShell

Communication

HIPAA

Vendor risk assessment

Autonomy

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity or related field

Tools

Qualys

Fortinet

SentinelOne

Microsoft Sentinel

Secureworks

Job description

HealthDrive in Framingham, MA is seeking a Senior Security Engineer to own day‑to‑day security operations and cloud configuration.

This hands‑on role drives phishing handling, email security, DLP and endpoint detections, coordinates with managed providers, and leads remediation efforts. The position offers a hybrid schedule and a compensation range of $85,000 to $115,000, dependent on experience.