Staff Engineer, Security

NextGen Federal Systems; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

NextGen Healthcare is seeking a Staff Security Engineer to enhance the security posture across cloud workloads, containers, and pipelines. The role emphasizes automation, AI, and CNAPP-based risk prioritization, with collaboration across DevSecOps, application, and infrastructure teams.

The ideal candidate has a software engineering background and experience protecting against application and infrastructure threats, plus hands-on scripting and incident response capabilities.

Qualifications

• Bachelor's Degree in Computer Science or related discipline.
• 6+ years of experience in systems engineering, software engineering, security, or related experience.
• Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.
• Licenses/Certifications in AWS, Google Cloud Platform (GCP), OCSP, CEH, or similar.

Responsibilities

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
• Collaborate with DevSecOps teams in authoring cloud native security policies via Terraform, and IaC scanning as part of all IaaS deployments.
• Participate in threat intelligence and forensic analysis exercises, to predict and prevent attacks.
• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities against all cloud hosted systems.
• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).
• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.
• Leverage AI-enabled IDE’s to speed up security reviews of infrastructure-as-code, pull requests, and architecture designs, while validating AI-generated findings and recommendations for accuracy.
• Use a CNAPP to identify and prioritize misconfigurations, vulnerabilities, and exposure across cloud workloads, containers, and pipelines, and integrate its findings with the SIEM.
• Research and understand AI-driven threats, such as AI-enabled phishing and social engineering, prompt injection, data leakage, and misuse of AI agents and tools, and translate them into detections, controls, and guidance for engineering teams.
• Securely connect AI tools to CNAPP, SIEM, and other security data sources using MCP, including assessing security risks of MCP servers, tool permissions, and data access.
• Use AI tools to correlate CNAPP and SIEM data and provide contextual reporting on the platform's risk posture, turning findings into actionable insights for engineering teams and leadership.
• Research, implement, and configure security protections for email, hosts, and identities.
• Write scripts to automate manual tasks.

Skills

Python scripting

Shell scripting

Cross-functional collaboration

Security minded

Education

Bachelor's Degree in Computer Science

Tools

Git

Jira

Confluence

Terraform

CloudFormation

Job description

Job Description

NextGen Healthcare is looking for an experienced Staff Security Engineer to join our Security Engineering team to help drive continuous improvements in NextGen’s security posture. The Staff Security Engineer will leverage automation, AI, and other nascent technologies to increase efficiency in security operations. The ideal candidate is one who has a software engineering background with experience in protecting against application and infrastructure security threats.

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.


• Collaborate with DevSecOps teams in authoring cloud native security policies via Terraform, and IaC scanning as part of all IaaS deployments.


• Participate in threat intelligence and forensic analysis exercises, to predict and prevent attacks.


• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities against all cloud hosted systems.


• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).


• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.


• Leverage AI-enabled IDE’s to speed up security reviews of infrastructure-as-code, pull requests, and architecture designs, while validating AI-generated findings and recommendations for accuracy.


• Use a Cloud-Native Application Protection Platform (CNAPP) to identify and prioritize misconfigurations, vulnerabilities, excessive permissions, and exposure across cloud workloads, containers, and pipelines, and integrate its findings with the SIEM.


• Research and understand AI-driven threats, such as AI-enabled phishing and social engineering, prompt injection, data leakage, and misuse of AI agents and tools, and translate them into detections, controls, and guidance for engineering teams.


• Securely connect AI tools to the CNAPP, SIEM, and other security data sources using the Model Context Protocol (MCP), including assessing the security risks of MCP servers, tool permissions, and data access.


• Use AI tools to correlate CNAPP and SIEM data and provide contextual reporting on the platform's risk posture, turning findings into clear, prioritized, and actionable insights for engineering teams and leadership.


• Research, implement, and configure security protections for email, hosts, and identities.


• Write scripts to automate manual tasks.

Education

Bachelor's Degree in Computer Science or related discipline. Or, any combination of education and experience which would provide the required qualifications for the position.

Experience

• 6+ years of experience in systems engineering, software engineering, security, or related experience.


• Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.


• LicensesCertifications in Amazon Web Services (AWS), Google Cloud Platform (GCP), OCSP, CEH, or similar.

Knowledge, Skills and Ability

Knowledge of: Windows or Linux shell scripting and coding with a language like Python; infrastructure-as-code tooling like CloudFormation & Terraform; deploying and managing enterprise-scale applications in cloud services like AWS; Linux operating system; configuration management tools like Ansible, Puppet, Chef, and containerization technologies; building and testing software using Jenkins or similar continuous integration systems; relational and/or NoSQL databases like Microsoft SQL Server, PostgreSQL, and MongoDB; Microsoft Office Suite.Knowledge of: AI-assisted development and security tools such as Claude Code; the Model Context Protocol (MCP) and how it connects AI agents to tools and data, including its security implications; CNAPP platforms; SIEM platforms and log correlation; and emerging AI-driven threats and defenses.Skill in: Working as member of a team; communicating effectively; establishing and maintaining effective working relationships.Ability to: Determine how a system should work and how changes in conditions, operations, and the environment will affect outcomes; work in a fast-paced environment; stay organized, prioritize workload, multi-task, and meet deadlines.

Company Notice

The company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the company reserves the right to change this job description and/or assign tasks for the employee to perform, as the company may deem appropriate.

Equal Opportunity

NextGen Healthcare is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.