Security Operations Engineer

Description

The company is a healthcare technology business, and this security engineer role sits at the core of protecting its systems and the patient and organizational data they hold.

You report to the Director of Security as an individual contributor. Most of the work is hands-on, covering security operations (SecOps) and IT security projects.

You will build, automate, and run security controls and take a lead role in responding to security incidents. The role suits someone who works well at pace, likes owning their area, and wants to cut down repetitive work.

Responsibilities

• Design, put in place, and maintain SecOps workflows, threat detection, and incident response procedures for the corporate and cloud environments.
• Build low-code and custom automations, for example with Torq, to handle security alerts, routine IT security work, and incident triage.
• Run and tune security and endpoint management tools such as Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and similar platforms.
• Keep SOC2 and HIPAA security controls in continuous compliance, and take part in audit preparation, evidence collection, and control enforcement.
• Work with IT and engineering colleagues to harden systems, apply zero-trust endpoint policies, and make employee workflows more secure.
• Investigate the root cause of security incidents and add preventive measures so recurring risks are removed.

Requirements

• 3-5 years of hands-on experience in security operations, IT security, or system administration, with a clear security focus.
• A track record of detecting, investigating, and fixing security incidents in a modern cloud or hybrid environment.
• Solid IT foundations across endpoint administration on macOS and Windows, identity management, and network security.
• Practical experience keeping SOC2 and/or HIPAA controls running in day-to-day operations.
• Experience automating security or IT tasks with SOAR platforms, scripting in Python, PowerShell, or Bash, or API integrations.
• Bonus: hands-on experience setting up SOC2 or HIPAA controls from the start, or working directly with external auditors.
• Bonus: working familiarity with the company's stack: Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and Torq.
• Bonus: relevant industry certifications such as Security+, Network+, GIAC, or vendor platform certifications.

Conditions

The role is hybrid.

Reports to the Director of Security as an individual contributor.

The company provides equal opportunity in employment.

Benefits

• Weekly lunches and stocked fridges in the office.
• Monthly social committee events.
• 18 vacation days, 9 company holidays, 5 sick days, and 2 personal days.
• Stock options for every full-time employee.
• Paid parental leave.
• 401(k) plan.
• Commuter benefits.
• A choice of health, dental, and vision insurance plans.