Staff Security Engineer, Detection & Response San Francisco, California, United States

NexHealth; Utah; On-site; USD 110,000 - 150,000; Full time

Job summary

A leading company is seeking a Staff Security Engineer to design and build a Detection & Response platform. This role focuses on safeguarding sensitive data and automating response mechanisms to enhance security and efficiency. The ideal candidate has extensive experience in security teams and a strong understanding of modern threats.

Qualifications

• 6+ years of experience on Security teams.
• Strong knowledge of modern adversary TTPs.
• Proficient in Python and scripting.

Responsibilities

• Identify and mitigate abuse and threats across products.
• Define, develop, and refine alerting rules.
• Facilitate security incident response in a collaborative setting.

Skills

Security teamwork

Threat modeling

Collaboration

Risk mitigation

Automation scripting

Tools

AWS

SQL

SIEM tools

Job description

Staff Security Engineer, Detection & Response

About NexHealth

NexHealth is on a mission to accelerate healthcare innovation by modernizing the industry with real-time EHR integration APIs and a scalable platform. Founded in 2017, NexHealth serves 10,000+ practices, 50M+ patients, and developers across 15+ EHR systems. Backed by $177M in Series C funding, the company is headquartered in San Francisco, CA, and Draper, UT.

Staff Security Engineer, Detection & Response

NexHealth is seeking a Staff or Senior Security Engineer to help design and build a Detection & Response platform aimed at identifying and mitigating abuse, malicious activity, and threats across our products, infrastructure, and corporate environments. This role will focus on safeguarding sensitive data, including PHI and IP, and automating response mechanisms to reduce manual intervention and improve response times.

What You'll Do

• Identify threats relevant to the company using threat modeling and prioritize the action plan accordingly
• Define, develop, test, and refine alerting rules to minimize false positives and improve our signal-to-noise ratio, ensuring our detection systems are both efficient and effective.
• Streamline response processes by creating detailed Incident Response (IR) runbooks and developing Security Orchestration, Automation, and Response (SOAR) capabilities to reduce manual intervention and enhance response times.
• Improve detection coverage and accuracy across all monitored systems and applications.
• Facilitate security incident response in a collaborative, cross-functional setting, and lead to the resolution from threats originating both internally and externally

What You'll Bring

• 6+ years of experience on Security teams, building detection platforms, writing detections, and automating responses.
• Strong knowledge of modern adversary TTPs.
• Experienced with AWS, databases, data warehouses, web apps, and SIEM tools.
• Proficient in Python, scripting, and SQL.
• Proven ability to collaborate, execute tasks, and prioritize risk mitigation

Here’s a glimpse into our interview process:

• You’ll talk with a NexHeath Recruiter
• You’ll talk with the Hiring Manager on a video call
• You’ll talk with Team Members on a video call
• You’ll do a Panel Presentation or Working Session with a small panel

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf