Staff Security Engineer: AI-Driven Cloud Security

NextGen Federal Systems; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

NextGen Healthcare is seeking a Staff Security Engineer to enhance the security posture across cloud workloads, containers, and pipelines. The role emphasizes automation, AI, and CNAPP-based risk prioritization, with collaboration across DevSecOps, application, and infrastructure teams.

The ideal candidate has a software engineering background and experience protecting against application and infrastructure threats, plus hands-on scripting and incident response capabilities.

Qualifications

• Bachelor's Degree in Computer Science or related discipline.
• 6+ years of experience in systems engineering, software engineering, security, or related experience.
• Experience with modern source control and ticketing tools such as Git, Jira, and Confluence.
• Licenses/Certifications in AWS, Google Cloud Platform (GCP), OCSP, CEH, or similar.

Responsibilities

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
• Collaborate with DevSecOps teams in authoring cloud native security policies via Terraform, and IaC scanning as part of all IaaS deployments.
• Participate in threat intelligence and forensic analysis exercises, to predict and prevent attacks.
• Work closely with application and infrastructure teams to automate the mitigation of vulnerabilities against all cloud hosted systems.
• Create and maintain thorough runbooks and incident response documentation for the Security Operations Center (SOC).
• Create and monitor correlated event dashboards in the SIEM, alerting against thresholds you develop.
• Leverage AI-enabled IDE’s to speed up security reviews of infrastructure-as-code, pull requests, and architecture designs, while validating AI-generated findings and recommendations for accuracy.
• Use a CNAPP to identify and prioritize misconfigurations, vulnerabilities, and exposure across cloud workloads, containers, and pipelines, and integrate its findings with the SIEM.
• Research and understand AI-driven threats, such as AI-enabled phishing and social engineering, prompt injection, data leakage, and misuse of AI agents and tools, and translate them into detections, controls, and guidance for engineering teams.
• Securely connect AI tools to CNAPP, SIEM, and other security data sources using MCP, including assessing security risks of MCP servers, tool permissions, and data access.
• Use AI tools to correlate CNAPP and SIEM data and provide contextual reporting on the platform's risk posture, turning findings into actionable insights for engineering teams and leadership.
• Research, implement, and configure security protections for email, hosts, and identities.
• Write scripts to automate manual tasks.

Skills

Python scripting

Shell scripting

Cross-functional collaboration

Security minded

Education

Bachelor's Degree in Computer Science

Tools

Git

Jira

Confluence

Terraform

CloudFormation

Job description

NextGen Healthcare is seeking a Staff Security Engineer to enhance the security posture across cloud workloads, containers, and pipelines. The role emphasizes automation, AI, and CNAPP-based risk prioritization, with collaboration across DevSecOps, application, and infrastructure teams.

The ideal candidate has a software engineering background and experience protecting against application and infrastructure threats, plus hands-on scripting and incident response capabilities.