Staff Security Engineer: Endpoint & Email Security Lead

Alt; Dallas, Nashville, Des Moines (TX, TN, IA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Compensation

Medical/Dental/Vision

FSA/HSA

Generous PTO and hybrid work

401(k) with company match

Life & Pet Insurance

Job summary

OpenLoop Health is seeking a Staff Security Engineer to own and mature security for our telehealth platforms in a hybrid work environment. You’ll lead endpoint and email security, build policy baselines, and collaborate with SecOps to align with HITRUST and SOC 2 standards.

You will mentor engineers, write standards, and help map controls to regulatory requirements while driving automation and threat modeling across the SAE program.

Qualifications

• 8+ years in security engineering.
• Deep, hands-on expertise in endpoint security and email security.
• Experience deploying and operating MDM/MAM platforms (Kandji, Jamf, Intune, or similar).
• Experience deploying and managing an enterprise browser platform.
• Hands-on experience implementing CIS Benchmarks at fleet scale.
• Exposure to secure remote access, DNS filtering, segmentation, or firewall policy.
• Cloud security fundamentals (AWS) — IAM, network controls, logging.
• DevSecOps practices: IaC, CI/CD security, secrets management.
• Scripting in Python, Bash, PowerShell, or similar.
• Experience in regulated environments (HIPAA, HITRUST, SOC 2, PCI).
• Clear written communication and ability to defend a decision.

Responsibilities

• Own engineering of security controls for macOS and Windows fleet (MDM, disk encryption, patching).
• Engineer MDM/MAM policies protecting PHI data.
• Deploy and manage an enterprise browser platform with data controls and policies.
• Build CIS Benchmark baselines and track drift for HITRUST/SOC 2 audits.
• Drive least-privilege on endpoints without hindering clinicians.

Skills

Endpoint security

Email security

MDS/MAM platforms

Enterprise browser

CIS Benchmarks

Cloud security basics

DevSecOps

Scripting (Python/Bash/PowerShell)

Regulated environment (HIPAA/HITRUST/S

Tools

Kandji

Jamf

Intune

Job description

OpenLoop Health is seeking a Staff Security Engineer to own and mature security for our telehealth platforms in a hybrid work environment. You’ll lead endpoint and email security, build policy baselines, and collaborate with SecOps to align with HITRUST and SOC 2 standards.

You will mentor engineers, write standards, and help map controls to regulatory requirements while driving automation and threat modeling across the SAE program.