Staff Security Engineer: AI-Driven Cloud Security & Automation

NextGen Federal Systems; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

NextGen Healthcare is looking for an experienced Staff Security Engineer to join our Security Engineering team to drive improvements in our security posture. The role emphasizes automation, AI, and cloud-native security tooling.

The ideal candidate has a software engineering background with experience protecting against application and infrastructure threats. You will work with DevSecOps on Taurus Terraform-based policies, automate vulnerability mitigation, and contribute to SOC runbooks and

Qualifications

• Bachelor’s Degree in Computer Science or related discipline, or equivalent experience.
• 6+ years in systems engineering, software security, or related.
• Certifications in cloud or security domains (AWS/GCP/CEH) preferred.

Responsibilities

• Develop and maintain security tooling, guidelines, and standards for the Security Engineering team.
• Collaborate with DevSecOps to author cloud-native security policies via Terraform and IaC scanning for IaaS deployments.
• Participate in threat intelligence and forensic analysis to predict and prevent attacks.
• Automate mitigation of vulnerabilities across cloud hosted systems with application and infrastructure teams.
• Create and maintain runbooks and incident response documentation for the SOC.
• Create and monitor SIEM dashboards and alerts based on defined thresholds.
• Leverage AI-enabled IDEs to speed up security reviews of IaC, PRs, and architecture designs, validating AI findings for accuracy.

Skills

Python scripting

Team collaboration

Effective communication

Fast-paced work

Education

Bachelor’s Degree in Computer Science

Tools

Git

Jira

Confluence

Terraform

CloudFormation

Jenkins

CNAPP

SIEM

Claude Code

MCP

Job description

NextGen Healthcare is looking for an experienced Staff Security Engineer to join our Security Engineering team to drive improvements in our security posture. The role emphasizes automation, AI, and cloud-native security tooling.

The ideal candidate has a software engineering background with experience protecting against application and infrastructure threats. You will work with DevSecOps on Taurus Terraform-based policies, automate vulnerability mitigation, and contribute to SOC runbooks and