Lead Security Engineer

Job description

**This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Lead Security Engineer based in the United States.** We are seeking an experienced Lead Security Engineer to strengthen enterprise cybersecurity and protect sensitive information across a distributed healthcare environment. In this role, you will provide hands-on technical leadership across security engineering, threat detection, incident response, vulnerability management, and identity and access security. You will oversee critical security technologies, coordinate with managed security service providers, and ensure that security controls remain effective, scalable, and aligned with industry standards. You will also lead and mentor a team of security professionals while collaborating with IT, clinical stakeholders, and executive leadership to address emerging risks. This position offers the opportunity to modernize security operations, improve automation, and drive continuous improvement across a growing healthcare network. The role is fully remote, combining technical execution, team leadership, and strategic risk management to safeguard patient information and support reliable clinical operations. ### Accountabilities - **Security Engineering and Infrastructure:** Lead the administration, configuration, optimization, and ongoing maintenance of enterprise security technologies, including SIEM/SOAR, endpoint protection, email security, privileged access management, and secure network access solutions. - **Security Platform Management:** Maintain and improve security tools such as Rapid7 InsightIDR, InsightVM, and InsightConnect; Bitdefender GravityZone; Mimecast; Delinea Secret Server; and Cato, ensuring appropriate coverage, effective configurations, and cost-efficient licensing. - **Cloud and Microsoft Security:** Strengthen security across Microsoft 365, Azure, Entra ID, and other cloud and SaaS environments by implementing configuration baselines, monitoring security posture, and addressing identified weaknesses. - **Threat Detection and Incident Response:** Lead security event triage and investigations in collaboration with managed detection and response partners, coordinating containment, recovery, stakeholder communication, and post-incident reviews. - **Vulnerability and Patch Management:** Oversee vulnerability scanning, risk-based prioritization, remediation tracking, and patch management across endpoints, servers, cloud platforms, and network infrastructure. Document risks associated with legacy systems and validate compensating controls when immediate remediation is not possible. - **Security Standards and Procedures:** Develop and maintain incident response playbooks, technical standards, operational runbooks, and repeatable procedures to improve consistency, efficiency, and the quality of security operations. - **Identity and Access Management:** Strengthen access controls through multifactor authentication, conditional access, privileged access management, joiner/mover/leaver processes, and periodic access reviews. - **Risk Assessments and Compliance:** Coordinate annual security risk assessments, vulnerability assessments, and penetration tests aligned with HIPAA and NIST requirements. Track assessment findings, coordinate remediation, and communicate security risks and priorities to relevant stakeholders. - **Third-Party and Integration Security:** Assess security risks associated with vendors, system integrations, newly onboarded locations, and acquired healthcare practices, ensuring that appropriate safeguards are implemented. - **Managed Security Partner Oversight:** Act as the technical lead and primary day-to-day contact for managed service providers, managed security service providers, and managed detection and response partners. Evaluate service quality, validate investigations and deliverables, monitor contractual service-level agreements, and coordinate corrective actions when necessary. - **Team Leadership and Development:** Lead, mentor, and develop a team of three security professionals by setting priorities, reviewing deliverables, strengthening technical capabilities, and providing guidance during complex investigations and remediation efforts. - **Automation and Continuous Improvement:** Identify opportunities to streamline security workflows through PowerShell, Python, and other automation techniques, improving operational efficiency and the consistency of security controls. - **Risk Communication and Collaboration:** Clearly communicate technical risks, operational priorities, incident findings, remediation progress, and recommendations to IT leadership, nontechnical decision-makers, and clinical stakeholders. - **Cross-Functional Security Support:** Collaborate with internal IT teams and external partners to resolve operational challenges, strengthen security governance, and support the ongoing reliability of healthcare systems and services. ## Requirements - **Education:** A bachelor's degree in information security, computer science, or a related field is preferred. - **Professional Experience:** At least eight years of experience in information security or security engineering, including hands-on administration and operation of production security technologies. - **Leadership Experience:** At least two years of experience leading, supervising, or mentoring security professionals, with the ability to establish priorities, develop team capabilities, and maintain accountability. - **Security Operations Expertise:** Demonstrated experience overseeing managed service providers, managed security service providers, or managed detection and response partners, as well as leading security investigations and incident response activities. - **Security Technology Proficiency:** Practical experience with SIEM/XDR platforms, vulnerability management tools, endpoint protection, email security, network security, cloud security, and privileged access management. - **Microsoft Security Environment:** Experience securing Microsoft 365, Azure, and Entra ID, ideally combined with hands-on familiarity with Rapid7 InsightIDR and InsightVM. - **Vulnerability Management:** Strong understanding of vulnerability assessment, risk prioritization, patch management, remediation validation, and compensating controls for systems that cannot be immediately updated. - **Healthcare Security and Compliance:** Knowledge of HIPAA, HITECH, and healthcare security frameworks, including HITRUST and the NIST Cybersecurity Framework. - **Identity and Access Security:** Experience implementing and maintaining multifactor authentication, conditional access policies, privileged access controls, and identity lifecycle management processes. - **Scripting and Automation:** Practical skills in PowerShell, Python, or similar technologies to automate security processes, improve workflows, and reduce manual operational effort. - **Risk Assessment and Governance:** Ability to coordinate security assessments, interpret findings, track remediation activities, and translate technical vulnerabilities into actionable business priorities. - **Communication and Collaboration:** Strong written and verbal communication skills, sound judgment, and the ability to explain complex security issues to both technical and nontechnical audiences. - **Problem-Solving and Adaptability:** A proactive approach to identifying risks, investigating incidents, managing competing priorities, and implementing sustainable security improvements. - **Preferred Healthcare Experience:** Previous experience in healthcare or a multisite healthcare organization, familiarity with electronic health record systems such as OncoEMR, and experience supporting mergers, acquisitions, or new-site security integration. - **Preferred Certifications:** CISSP, GIAC certifications such as GCIH, GCIA, or GSEC, CCSP, or relevant Microsoft security certifications. - **Work Environment:** Ability to work effectively in a remote environment with a suitable home-office setup. The role may require travel of up to 25%. ## Benefits - **Competitive Compensation:** Annual salary range of $104,200–$155,800, depending on qualifications, experience, and other relevant factors. - **Comprehensive Healthcare Coverage:** Medical, dental, and vision insurance with access to a broad provider network. - **Retirement Savings:** A 401(k) plan featuring a 100% company match, subject to the applicable plan terms, with a range of investment options. - **Paid Time Off:** A generous paid time off program to support rest, personal commitments, and work-life balance. - **Remote Work Flexibility:** The opportunity to work remotely from the United States. - **Professional Development:** Access to professional development programs and tuition assistance to support continued learning and career advancement. - **Career Growth Opportunities:** An organizational focus on internal promotion and opportunities to expand technical expertise and leadership responsibilities. - **Professional Collaboration:** Opportunities to participate in annual company summits and connect with colleagues and professionals across a national healthcare network. - **Meaningful Mission:** Contribute to protecting sensitive patient information and maintaining secure, reliable technology that supports cancer care and clinical operations. - **Leadership Impact:** Help shape enterprise security strategy, mentor security professionals, and drive improvements across a growing, distributed healthcare organization.