Senior Security Engineer - Remote, Cloud & SIEM Lead

RSi; Mission (KS); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive pay

Fully remote with Mon–Fri schedule

Growth opportunities

Job summary

RSi, a healthcare revenue cycle management company, seeks a Senior Security Engineer to lead day-to-day security operations in a hybrid cloud environment (Azure/AWS) and protect PHI and payment data. The role reports to the CIO and demands hands-on expertise across EDR, IAM, SIEM, and vulnerability management.

You will partner with DevOps to integrate security into CI/CD and IaC, lead incident response, and ensure compliance with HIPAA, PCI-DSS, and SOC 2.

Qualifications

• 7+ years in security engineering, with at least 3 in a senior or lead role.
• Hands-on NinjaOne experience, or a comparable enterprise RMM platform.
• Real operational time in Rapid7 InsightVM and InsightIDR — tuning, reporting, workflow.
• Solid Azure security skills: Defender for Cloud, Sentinel, Entra ID, Key Vault, Azure Policy.
• Working knowledge of AWS security: GuardDuty, Security Hub, IAM, CloudTrail, KMS.
• Experience securing a Microsoft 365 tenant, including Defender for Office 365.
• PowerShell scripting. Python or KQL is a plus.
• HIPAA or similar regulated‑industry background.
• You can write clearly and hold your ground in front of non-technical executives.
• CISSP, CCSP, GCIH, AZ‑500, SC‑200, or AWS Certified Security – Specialty.
• Healthcare RCM experience, or familiarity with Latitude by Genesis.
• Time spent on GenAI or LLM security — data loss prevention, prompt and output governance.
• SOC 2 or HITRUST audit history.

Responsibilities

• Run NinjaOne for RMM, patching, and endpoint hygiene across the workforce.
• Administer EDR coverage on Windows, macOS, and server workloads.
• Work with Infrastructure on Entra ID security — conditional access, PIM, MFA, Defender for Identity.
• Keep least-privilege honest across on-prem AD, Entra ID, and our federated SaaS.
• Own Rapid7 InsightVM and InsightIDR as our primary vulnerability and SIEM platform.
• Run vulnerability management end to end: scanning, prioritization, SLAs, exceptions, executive reporting.
• Tune detections, triage alerts, and lead investigations.
• Coordinate pen tests and chase the remediation through to close.
• Configure Microsoft Defender for Cloud and Sentinel; integrate signal with Rapid7 where it makes sense.
• Administer AWS-native tooling: GuardDuty, Security Hub, IAM Access Analyzer, CloudTrail, Config, KMS.

Skills

Security engineering

Lead role

Scripting (PowerShell)

Python

Clear communication

Education

CISSP, CCSP, or AWS Certified Security – Specialty

Tools

NinjaOne

Rapid7 InsightVM

InsightIDR

Azure Defender for Cloud

Azure Sentinel

Entra ID

Defender for Cloud

GuardDuty

Job description

RSi, a healthcare revenue cycle management company, seeks a Senior Security Engineer to lead day-to-day security operations in a hybrid cloud environment (Azure/AWS) and protect PHI and payment data. The role reports to the CIO and demands hands-on expertise across EDR, IAM, SIEM, and vulnerability management.

You will partner with DevOps to integrate security into CI/CD and IaC, lead incident response, and ensure compliance with HIPAA, PCI-DSS, and SOC 2.